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INTRODUCTION 

All-weather/night/nap-of-the-earth  helicopter  flight  has  dramatized 
the  importance  of  reducing  crew  workload  as  a  high  priority  effort 
toward  improving  mission  effectiveness. 

The  past  and  predicted  growth  in  the  number  and  complexity  of 
subsystems  in  U.S.  Army  helicopters  has  made  subsystem  monitoring  a 
prime  candidate  for  design  efforts  aimed  at  the  reduction  of  crew 
workload. 

The  effort  reported  herein  was  directed  toward  the  reduction 
of  crew  workload  during  the  monitoring  of  subsystems  in  U.S.  Army 
helicopters  involved  the  application  of  Human  Factors  engineering 
principles  and  U.S.  Army  pilot  recommendations  to  the  design  of  an 
advanced  Subsystem  Status  Monitor  (SSM). 

Five  tasks  were  completed  toward  the  design  of  an  advanced  Subsystem 
Status  Monitor  that  will  reduce  crew  workload  during  the  monitoring  of 
helicopter  subsystems: 

1.  Analysis  of  parameters  currently  monitored  in  the  UH-60A, 

CH-47C,  OH-58C,  and  AH-lG  helicopters,  and  recommendation  of  information 
requirements  for  these  helicopters. 

2.  Development  of  prioritizatization,  logic,  and  display  formats  for 
the  presentation  of  Subsystem  information  on  multi -function  electronic 
displays  for  the  above-mentioned  helicopters. 

3.  Preliminary  design  of  system  architecture  incorporating  state- 
of-the-art,  near-term  and  long-term  technologies  into  an  advanced 
Subsystem  Status  Monitor. 

4.  Evaluation  of  preliminary  designs  to  determine  predicted  impacts 
on  flight  safety,  workload,  reliability  and  maintainability,  survivability 
and  vulnerability,  aircraft  space  and  volume,  aircraft  weight,  and  life 
cycle  costs. 

5.  Design  of  keyboard  and  associated  display  formats  for  the 
following  peripheral  functions:  checklist  presentation,  performance 
calculation,  and  load  monitoring. 
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TASK  I:  IDENTIFICATION  AND  ANALYSIS  OF  PARAMETERS 


Task  I  included  the  following  efforts: 

1.  Identification  of  subsystem  parameters  currently  monitored  and 
displayed  in  four  Army  helicopters  representative  of  the  following 
types:  utility,  cargo,  attack,  and  observation. 

2.  Cross -comparison  of  parameters  monitored  and  displayed  by  each 
of  the  helicopters  investigated. 

3.  Identification  of  subsystem  monitoring  information  requirements 
for  each  helicopter  investigated. 

4.  Investigation  of  the  desirability  of  modifying  information 
requirements  for  changing  mission  phases,  including:  pre-/ post-start, 
takeoff,  cruise,  hover,  land,  and  pre-/post-shutdown;  and  for  changing 
environmental  conditions,  including:  night/ day,  visual  meteorological 
conditions/  instrument  meteorological  conditions,  and  nap-of-the-earth/ 
flight  at  altitude. 

5.  Assessment  of  current  and  near-term  efforts  to  improve  signal 
source  technology  and  identification  of  signal  source  improvements 
likely  to  coincide  with  development  of  an  advanced  Subsystem  Status 
Monitor  (SSM). 

6.  Discussion  of  information  requirements  with  military  flight 
crews  rated  in  relevant  helicopter  classes  during  working  sessions  at 
Ft.  Rucker,  Alabama,  and  incorporation  of  flight  crew  inputs  into 
the  definition  of  information  requirements. 

IDENTIFICATION  OF  PARAMETERS  CURRENTLY  MONITORED  AND  DISPLAYED  IN 
REPRESENTATIVE  ARMY  HELICOPTERS 


Operators  Manuals  were  consulted  for  the  following  Army  helicopters: 
UH-60A  (utility),  CH-47C  (cargo),  OH-58C  (observation),  and  AH-1G 
(attack).  The  following  information  was  tabulated  for  each  helicopter: 
subsystem  parameters  displayed,  range  of  each  parameter,  normal  (green 
zone)  operation  band  for  each  parameter,  precaution  (amber  zone) 
limits  for  each  parameter,  malfunction  (red  zone)  limits  for  each 
parameter,  indicator  type  displaying  each  parameter,  signal  source  for 
each  parameter,  and  type  of  signal  source  output  (parameter  type).  This 
data  was  summarized  for  each  helicopter,  and  is  presented  in  Tables  1 
through  8  in  Appendix  A. 

The  UH-60A  and  the  CH-47C  are  twin  engine  helicopters,  while  the 
OH-58C  and  the  AH-1G  are-  single  engine  helicopters,  and  parameter  listings 
in  Tables  1  through  8  reflect  this  distinction.  The  AH-1G  is  a  tandem 
helicopter,  with  separate  instrument  and  caution  panels  for  pilot  and 
gunner.  Tables  7  and  8  therefore  include  an  additional  column  indicating 
whether  the  given  parameter  is  displayed  to  pilot,  gunner,  or  both. 

CROSS -COMPARISON  OF  PARAMETERS 

Parameters  displayed  in  the  UH-60A,  CH-47C,  OH-58C,  and  AH-1G 
were  cross-compared.  Tables  9  through  12  in  Appendix  A  summarize  these 
cross-comparisons . 
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Table  9,  which  itemizes  parameters  displayed  in  all  four  heli¬ 
copters,  is  noteworthy  by  virtue  of  its  brevity.  The  parameters 
itemized  in  Tables  10  through  12,  however,  should  not  be  categorized  as 
superfluous,  since  many  of  these  parameters  are  representative  of 
subsystems  peculiar  to  specific  aircraft. 

IDENTIFICATION  OF  SUBSYSTEM  MONITORING  INFORMATION  REQUIREMENTS 

A  composite  list  of  all  parameters  displayed  by  any  of  the  four 
helicopters  investigated  was  prepared.  The  composite  list  was  reviewed 
for  each  helicopter  independently,  and  the  following  requirements  were 
identified: 

1.  Priority  of  the  given  parameter  information  for  the  given 
helicopter,  classified  as  follows: 

A.  Safety:  The  information  is  essential  for  the  maintenance  of 
aircraft  and  crew  safety. 

B.  Mission:  The  information  is  not  safety -essential,  but  is  essential 
for  mission  fulfillment. 

C.  Maintenance:  The  information  is  neither  safety-  nor  mission- 
essential,  but  is  necessary  for  post-flight  maintenance  recommendations . 

D.  Unnecessary:  The  information  is  not  safety-,  mission-,  nor 
maintenance-essential . 

2.  Mission  phases  during  which  it  is  necessary  to  display  the 
given  information,  including  takeoff,  cruise,  hover,  landing,  and 
shutdown. 

3.  Mission  environments  during  which  it  is  necessary  to  display 
the  given  information,  including:  night,  day,  visual  meteorological 
conditions  (VMC),  instrument  meteorological  conditions  (IMC),  nap-of- 
the-earth  flight  (NOE),  and  flight  at  altitude. 

A.  Essential  but  not  superfluous  display  logic,  classifying 
parameters  as: 

A.  Continual:  The  information  should  be  displayed  continually  and 
automatically. 

B.  Critical  only:  The  information  should  be  displayed  automatically 
only  when  it  represents  exceedance  of  critical  limits. 

C.  Access  only:  The  information  should  not  be  automatically  displayed 
under  any  conditions,  but  manually  accessed  display  provisions  should 
exist. 

5.  Essential  but  not  superfluous  display  format,  classifying  display 
requirements  as: 

A.  Quantitative:  Digital  readout  is  essential  and  sufficient. 

B.  Qualitative:  Analog  representation  is  essential  and  sufficient. 

C.  Combined:  Combined  digital  readout  and  analog  representation 
is  required. 

D.  Caution:  Caution  message  without  digital  readout  or  analog 
representation  is  essential  and  sufficient. 

E.  Advisory:  Advisory  message  without  digital  readout  or  analog 
representation  is  essential  and  sufficient. 

The  results  of  this  information  requirements  analysis  are  presented 
in  Tables  13  through  16  in  Appendix  A. 
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Tables  13  through  16  represent  the  finalized  information  requirements 
resulting  from  baseline  information  requirements  defined  by  Sikorsky 
Hunan  Factors  engineers j  information  requirements  analysis  by  U.S.  Army 
helicopter  pilots  at  Ft.  Rucker,  Alabama,  and  flight  test  pilots  at 
Sikorsky  Aircraft;  and  analysis  of  the  feasibility  of  incorporating 
mission  phase-specific  and  environmental  condition-specific  display 
logic  into  the  eventual  SSM  design.  The  baseline  information  requirements 
suggested  by  human  factors  engineers  are  presented  in  Tables  17  through 

20  in  Appendix  A.  Tables  17  through  20  anticipate  the  format  of  an 
information  requirements  questionnaire  that  was  later  submitted  to 
Army  pilots  at  Ft.  Rucker  and  to  test  pilots  at  Sikorsky  Aircraft,  and 
represent  the  first  step  toward  the  finalized  identification  of  information 
requirements  presented  in  Tables  13  through  16.  The  other  phases  toward 
finalizing  information  requirements  are  described  below. 

DISCUSSION  OF  INFORMATION  REQUIREMENTS  AND  DISPLAY  LOGIC  WITH  U.S.  ARMY 
HELICOPTER  PILOTS  AND  SIKORSKY  AIRCRAFT  TEST  PILOTS 

A  questionnaire  soliciting  responses  to  questions  concerning 
information  requirements  and  display-by-exception  logic  and  formats 
was  prepared  and  presented  to  45  Army  pilots  rated  in  the  CH-47C,  OH-58C, 
and  UH-lH  helicopters  at  Ft.  Rucker,  Alabama.  The  same  questionnaire 
was  presented  to  Sikorsky  Aircraft  test  pilots  with  UH-60A  experience. 

Questionnaire  administration  was  preceded  by  briefings  explaining 
SSM  design  goals,  display -by-exception  philosophy,  and  instructions, 
and  was  succeeded  by  in-depth  follow-up  interviews  during  a  one-week 
visit  by  human  factors  engineers  and  Army  contract  monitoring  and 
electronics  specialists,  as  well  as  Army  human  factors  specialists. 

A  complete  sample  questionnaire  is  presented  in  Appendix  B. 

The  questionnaires  were  analyzed  to  form  a  composite  response 
set  for  each  aircraft.  These  composite  results  are  presented  in  Tables 

21  through  24  in  Appendix  B. 

INVESTIGATION  OF  THE  DESIRABILITY  OF  MODIFYING  INFORMATION  REQUIREMENTS 
FOR  CHANGING  MISSION  PHASES  AND  ENVIRONMENTAL  CONDITIONS 

The  subsystem  monitoring  information  currently  displayed  in  the 
UH-60A,  CH-47C,  OH-56C,  and  AH-1G  was  compiled  into  a  single  list  of 
parameters  monitored  and  displayed,  by  any  of  the  four  helicopters. 

For  each  parameter  displayed,  the  mission  phases  during  which  the  parameter 

is  currently  relevant  were  identified  for  each  helicopter.  In  addition, 
for  each  helicopter  displaying  a  given  parameter,  the  type  of  indicator 
currently  used  to  display  the  parameter  was  identified. 

Table  25  in  Appendix  A  presents  a  Parameter  X  Helicopter  X  Mission 
Phase  cross-comparison  for  each  parameter  currently  displayed.  In 
addition,  parameters  listed  in  Table  25  are  grouped  by  subsystem. 

Table  25  complements  Tables  1  through  8,  which  list  parameters 
currently  displayed  in  the  four  helicopters,  and  Tables  9  through  12, 
which  cross-compare  helicopters,  by:  allowing  direct  comparison  for  each 
parameter  of  helicopters  displaying  or  not  displaying  the  given  parameter, 
allowing  direct  comparison  for  each  parameter  of  the  types  of  Indicator 
currently  used  to  display  the  given  parameter,  and  grouping  all  parameters 
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into  subsystems. 

Taken  together,  Tables  1  through  16  and  Table  25  suggest  that:  there 
Is  currently  a  lack  of  standardization  across  helicopters  of  the  parameters 
that  are  monitored  and  displayed,  even  where  no  helicopter-peculiar 
requirements  exist  (engine  fire,  engine  oil  quantity,  XMSN  oil  temperature, 
hydraulic  pressure,  and  electrical  power  are  examples);  and  while  there 
is  general  agreement  across  helicopter  types  in  terms  of  the  indicator 
type  employed  in  displaying  commonly  displayed  parameters,  there  are 
noticeable  differences,  including  vertical  scale  versus  dial  instruments, 
warning  versus  caution  lights,  and  audio  tone  auxiliary  warnings. 

Table  25  does  not  present  recommended  information  requirements,  but 
rather  analyzes  the  mission-phase  relevance  of  currently  displayed 
parameters.  The  analytical  results  presented  Indicate  that  with  the 
exception  of  the  APU  subsystem,  mission-phase  distinctions  between 
information  requirements  are  minimal.  Where  the  APU  is  activated  for 
in-flight  use,  mission-phase  distinctions  are  further  minimized. 

In  addition  to  the  factor  of  minimal  distinctions  between  mission- 
phase  information  requirements,  the  following  factors  argue  against 
designing  a  separate  monitoring/dlsplay  logic  for  different  mission 
phases:  there  is  no  easily  sensed  parameter  that  can  be  relied  upon 
to  govern  automatic  mode  switching  by  mission  phase;  and  manual  mode 
switching  during  transitions  between  mission  phases  would  increase 
crew  workload  (manipulation,  planning,  memory,  and  decision-making), 
particularly  during  single-pilot  operation. 

Organization  of  information  requirements  differentially  for  differing 
environmental  conditions  was  also  deemed  of  limited  value  because: 
environmental  conditions  are  subject  to  sudden  and  frequent  fluctuations 
which  cannot  be  sensed  automatically;  the  requirement  to  respond  to 
frequently  fluctuating  environmental  conditions  by  manual  mode  selection 
would  increase  crew  workload,  especially  during  single-pilot  operation; 
and  information  requirements  do  not  differ  significantly  for  differing 
environmental  conditions. 

The  goal  governing  the  design  of  the  advanced  SSM  was  to  reduce  crew 
workload  during  the  monitoring  of  helicopter  subsystems.  Throughout  the 
design  process,  the  flexibility  of  computerized  monitors  and  electronic 
display  devices  was  therefore  consciously  bounded  by  the  requirement  that 
the  SSM  not  increase  the  crew  workload  by  requiring  additional  manipula¬ 
tion,  taxing  human  memory  and  information-processing  capacity,  or  delaying 
response  time  by  complicating  decision-making  processes.  In  the  cases  of 
mission  phase-specific  and  environmental  condition«specif ic  information 
requirements,  an  exercise  of  technological  flexibility  would  negatively 
impact  crew  workload,  due  to  the  minimal  distinctions  present. 

The  major  factor  governing  the  stringent  requirement  for  reduced 
workload  is  the  all-weather/night/NOE  flight  profile.  Rather  than 
attempt  to  account  for  this  profile  as  a  distinct  helicopter  mission  with 
peculiar  requirements,  the  all-weather/night/NOE  profile  was  taken  as 
a  worst-case  workload  problem  whose  solution  would  transfer  automatically 
to  reduced  workload  under  all  other  situations. 

Where  only  dedicated  indicators  are  permitted,  crew  workload 
reduction  efforts  are  limited  to  the  design  and  placement  of  individual 


indicators  and  the  identification  of  information  requirements  that  suggest 
the  addition  or  removal  of  indicators.  Where  multi-function  displays 
are  permitted,  however,  the  effort  to  reduce  crew  wrokload  is  not  limited 
to  identification  of  information  requirements,  but  rather  emphasizes 
the  importance  of  defining  the  logic  governing  the  nondedicated  display 
of  subsystem  information.  On  this  account,  Task  II  (Definition  of  Informa¬ 
tion  Handling  Formats)  is  viewed  as  the  major  effort  toward  crew  workload 
reduction,  and  Task  I  is  viewed  as  a  preliminary  phase  during  which 
human  factors  engineers  and  Army  pilots  defined  the  information  to  be 
displayed  and  established  mutually  agreeable  principles  governing  display- 
by-exception  logic  for  helicopter  subsystems. 

The  information  presented  in  Tables  1  through  25,  therefore,  must 
be  viewed  as  merely  preliminary  to  Task  II  Army  pilot  reviews  and 
definition  by  both  human  factors  engineers  and  Army  pilots  of  display 
logic  and  formats. 

ASSESSMENT  OF  SIGNAL  SOURCE  TECHNOLOGY 

Table  26  lists  the  major  types  of  signal  source  devices  employed  in 
the  four  helicopters  studied  for  which  avenues  of  improvement  have  been 
identified.  Figures  Included  are  approximate.  The  majority  of  improvement 
avenues  listed  consist  of  improved  accuracy  and  reliability  without 
resort  to  radical  design  changes.  Additionally,  however,  the  following 
points  resulted  from  assessment  of  signal  source  technology: 

1.  Currently,  the  major  avenue  of  radical  signal  source  design 
change  appears  to  be  fiber-optics  technology,  which  is  being  employed 
experimentally  in  tachometers  and  heat  sensors. 

2.  The  only  signal  source  reliability/accuracy/repeatability 
problems  consistently  identified  by  interviewed  Army  pilots  were  chip 
detectors,  engine  fire  detectors,  and  low  fuel  detectors. 

3.  An  advanced  SSM  which  Includes  provisions  for  sensor  failure 
analysis  (through  computerized  modelling  and/or  cross-comparison  of 
triply  redundant  sensors)  can  effectively  inhibit  the  display  of  false 
warnings  independently  of  improved  signal  source  technology  per  se. 

The  preliminary  designs  identified  in  Task  III  contribute  toward  this  end. 
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TASK  II:  DEFINITION  OF  INFORMATION  HANDLING  FORMATS 

Task  II  involved  the  definition  of  information  handling  logic 
and  display  formats  for  the  presentation  of  the  information  recommended 
in  Task  I. 

DEFINITION  OF  DISPLAY  LOGIC 

Tables  27  through  30  in  Appendix  A  summarize  the  display  logic 
defined  for  each  of  the  four  helicopters  studied.  The  following  sections 
explain  the  efforts  expended  to  compose  Tables  27  through  30. 

Identification  Of  Level  Of  Urgency  For  Each  Parameter 

A  questionnaire  was  presented  to  helicopter  instructor  pilots 
at  Ft.  Rucker,  Alabama,  and  to  test  pilots  at  Sikorsky  Aircraft.  Pilots 
were  asked  to  classify  parameters  as  safety  critical,  mission  essential, 
or  maintenance  required.  Pilot  classifications  were  summed  for  each 
parameter,  and  consensus  was  identified  for  each  parameter.  In  addition. 
Technical  Manuals  were  consulted  for  each  helicopter,  and  where  para¬ 
meters  were  classified  according  to  the  above  categories,  classifications 
were  itemized.  Where  pilot  consensus  was  high,  this  consensus  defined 
parameter  categorization.  Where  pilot  consensus  was  ambiguous,  Technical 
Manual  categorizations  were  applied. 

Results  of  urgency  categorization  appear  in  the  column  labeled 
URGENCY  in  Tables  27  through  30.  The  primary  use  of  this  data  was  to 
establish  a  first-level  classification  of  parameters  toward  later 
definition  of  prioritization  for  all  parameters,  and  for  determining 
waming/caution/advisory  classifications  of  parameter  messages. 

Determination  of  Desirability  of  Automatic  Responses 

This  effort  involved  recommendation  of  automated  response  to  para¬ 
meter  conditions  for  those  cases  in  which  response  is  not  currently 
automated.  The  results  are  tabulated  in  the  column  labeled  AUTO  RESPONSE 
in  Tables  27  through  30.  Both  Ft.  Rucker  and  Sikorsky  pilots  questioned 
generally  adhered  to  the  philosophy  that  automated  response  to  the 
parameters  listed  is  not  desirable.  Exceptions  include:  automatic  fuel 
balancing  to  maintain  within-llmlts  center  of  gravity;  automatic  APU 
actuation  after  hydraulic  system  failure,  provided  that  APU  in-flight 
usage  is  permissible;  automatic  XFEED  or  boost  pump  actuation  in  response 
to  low  fuel  pressure,  provided  that  system  leakage  can  be  sensed  and 
diagnosed  to  prevent  further  loss  of  fuel  that  might  result  from  cross¬ 
feeding  or  pumping  fuel  through  portions  of  fuel  systems  containing 
leaks. 

Where  automatic  responses  were  recommended,  it  was  further  decided 
whether  the  crew  should  or  need  not  be  Informed  of  automatic  corrective 
action  taken.  In  the  past,  where  automated  corrective  response  action 
has  been  Incorporated  into  an  aircraft,  the  question  of  whether  the 
crew  should  be  informed  of  the  automated  response  has  been  debated  on 
an  individual  case  basis,  often  with  consideration  in  mind  for  the  instru 
ment  panel  space  required  for  the  conveyance  of  such  information  via 
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a  dedicated  caution  light.  In  addition,  the  following  general  principles 
should  and  usually  do  guide  decision-making  regarding  the  appropriateness 
of  such  feedback: 

1.  Where  the  information  in  question  is  necessary  for  the  maintenance 
of  safety  of  flight,  for  mission  go/no-go  decisions,  or  for  recommendation 
of  post-flight  maintenance,  the  information  should  be  displayed. 

2.  Where  the  information  in  question  represents  a  change  in  status 
of  a  system  whose  previous  status  was  known  by  the  crew,  the  change 

of  status  information  should  be  displayed  (e.g.,  automatic  change  from 
direct  to  XFER  fuel  feed). 

The  advanced  SSM  will  include  two  features  which  also  bear  upc  the 
decision  to  display  or  refrain  from  displaying  feedback  of  automated 
responses : 

1.  On  the  overwhelming  reconanendation  of  Army  pilots  interviewed, 
the  SSM  will  include  display  of  precautionary  information  which  assists 
the  crew  in  predicting  caution  or  warning  conditions  .  The  display  of  loss 
of  redundancy,  which  has  in  the  past  been  debated  on  an  individual 
parameter  basis,  would  be  generally  recommended  for  the  SSM  as  a  pre¬ 
cautionary  advisory. 

2.  While  panel  space  has  been  an  item  of  concern  in  the  past,  the 
SSM  includes  multi-function  display  screens  that  allow  for  a  more  liberal 
approach  to  display  of  advisory  and  precautionary  information. 

The  items  identified  as  desirable  for  automatic  response  feedback 
are  listed  in  Tables  27  through  30  under  the  column  headed  AUTO  FEEDBACK. 

Specification  Of  Display/Refrain-from-disnlav  LorIc 


For  each  parameter,  the  appropriateness  of  the  following  alterna¬ 
tives  was  determined:  display  continually;  display  by  exception,  without 
allowing  manual  access;  or  display  by  exception,  allowing  manual  access. 

Strictly  speaking,  Rotor  Speed  and  Power  Available  were  the  only  parame¬ 
ters  recommended  for  continuous  display.  Power 'Available  was  to  be  displayed 
by  one  instrument  combining  the  status  of  torque,  NG,  and  TGT.  A  power  cur¬ 
sor  on  the  instrument  (see  Figure  5)  will  move  to  the  right  if  any  one  of 
these  three  basic  parameter  values  increases.  When  any  basic  parameter 
reaches  its  operating  limit,  the  power  cursor  will  reach  the  fixed  limit 
line,  illuminating  an  advisory  message  on  the  alphanumeric  panel. 

It  was  determined  through  pilot  interviews  and  human  factors  evalua¬ 
tions  that  all  other  parameters  should  be  displayed  by  exception.  That 
is,  dedicated  (continual)  display  of  all  other  subsystem  parameters 
should  be  replaced  by  a  system  logic  that  automatically  displays  only 
parameters  that  are  approaching  or  have  exceeded  limits,  or  that  are 
functionally  related  to  parameters  that  are  approaching  or  have  exceeded 
limits. 

This  display-by-exception  logic  is  recommended  as  a  means  of  pre¬ 
senting  essential  but  not  superfluous  subsystem  data.  Its  value  in  terms 
of  workload  reduction  is  viewed  as  most  apparent  during  high  (e.g.,  NOE) 
workload  environments.  It  was  nonetheless  deemed  desirable  to  allow 
manual  access  of  any  parameter,  so  long  as  manual  access  was  not  relied 
upon  as  the  sole  or  primary  method  of  displaying  essential  subsystem 
information.  This  manual  access  capability  complements  the  automatic 


display  by  exception,  enabling  a  reduction  of  monitoring  workload  when 
flight  workload  is  high,  while  permitting  manual  access  of  additional 
information  when  flight  workload  is  low. 

The  column  headed  DISPLAY  LOGIC  in  Tables  27  through  30  identifies 
those  messages  to  be  displayed  automatically  by  exception  and  those  items 
of  information  which  may  be  manually  accessed.  Items  displayed  by  excep¬ 
tion  are  subdivided  and  identified  as  warning,  caution,  or  precaution 
conditions/messages.  Manually  accessible  items  of  information  are  also 
identified.  It  will  be  noticed  that  more  than  one  display  logic  code  may 
be  applicable  to  a  single  parameter. 

In  addition,  the  column  headed  SYSTEM  identifies  the  system  whose 
related  parameters  are  also  displayed  in  conjunction  with  the  given 
parameter  when  the  parameter  is  displayed  either  automatically  or  by 
manual  access.  Where  no  system  is  identified,  the  parameter  is  displayed 
alone  when  displayed  automatically,  and  is  not  manually  accessible. 

Tables  31  through  34  in  Appendix  A  list  for  each  helicopter  the 
parameters  that  are  automatically  displayed  when  any  other  parameter  within 
the  same  system  is  automatically  displayed  ,  or  that  are  accessed  together 
when  a  selected  system  is  manually  accessed. 

It  may  be  noted  in  Tables  27  to  30  that  while  any  of  the  systems  may 
be  manually  accessed,  there  is  no  occasion  where  the  hydraulic  or  electrical 
systems  will  be  automatically  displayed. 

Specification  Of  Sufficient  But  Nonsuperf luous  Dimensions  To  Be  Displayed 

In  Tables  27  through  30  the  column  headed  DIMENSION  lists  the 
dimensions  recommended  as  sufficient  but  not  superfluous  for  each  display 
logic  alternative  of  each  parameter  (Warning,  Caution,  Precaution, 

Advisory,  Manual  Access). 

In  arriving  at  recommended  dimensions,  pilots  at  Ft.  Rucker  and 
Sikorsky  Aircraft  were  asked  to  identify  which  parameters  required  only 
quantitative  display,  which  required  only  qualitative  display  (analog), 
which  required  only  status  display  (Warning,  Caution,  Precaution),  and 
which  required  combined  qualitative  and  quantitative  display.  The  responses 
were  analyzed  for  consensus  and  reviewed  by  human  factors  engineers. 

It  was  further  determined  during  Interviews  with  pilots  that  while 
engine  and  transmission  parameters  require  both  qualitative  and  quantita¬ 
tive  display,  quantitative  and/or  status  displays  are  sufficient 

for  fuel,  hydraulic,  electrical,  and  APU  displays.  Specific  display 
formats  were  determined  later. 

Suggestion  Of  Parameter  Prioritization  For  Displays 

The  multi-function  display  of  information  dictated  that  each  item 
of  Information  that  could  be  displayed  be  assigned  a  priority  that  would 
govern  decisions  in  cases  of  simultaneous  faults.  Three  steps  were  under¬ 
taken  toward  assigning  priorities: 

1.  Parameters  were  classified  into  the  following  levels  of  urgency: 
Safety,  Mission,  and  Maintenance. 

2.  Within  each  urgency  classification,  priorities  were  assigned  by 
classifying  each  message  as  Warning,  Caution,  Precaution,  or  Advisory. 
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3.  Each  parameter  was  ranked  for  priority  independently  of  the 
above  classifications  and  this  ranking  was  applied  to  the  above  two 
levels  of  prioritization  to  assign  a  priority  for  each  item  of  information 
to  be  automatically  displayed. 

The  resulting  priority  assignments  are  identified  in  the  column 
labeled  PRIORITIES  in  Tables  27  through  30.  Tables  35  through  38  in 
Appendix  A  present  prioritized  listings  of  items  of  information  for  each 
helicopter. 

Manually  accessed  Information  has  not  been  entered  into  the  priori¬ 
tization,  and  is  coded  by  an  asterisk  (*)  in  the  PRIORITIES  column  of 
Tables  27  through  30.  Manually  accessed  information  will  be  assigned 
highest  priority  on  the  SSM  display. 

Suggestion  Of  Candidate  System  Events  For  Automatic  Recording 

It  is  recommended  that  the  SSM  possess  the  capability  of  recording 
the  following  information  automatically  during  warning,  caution,  and  pre¬ 
caution  conditions  for  all  parameters:  time  and  date  for  each  out-of- 
tolerance  condition;  duration  of  each  out-of -tolerance  condition;  status 
or  quantitative  reading,  where  measureable,  for  all  related  (same  system) 
parameters;  cumulative  frequency  of  out-of -tolerance  conditions  since  most 
recent  playback.  Recommended  candidates  for  automatic  recording  are 
listed  in  Tables  27  through  30  in  the  column  headed  AUTO  RECORDING. 

SUGGESTION  OF  HUMAN  SENSORY  CHANNELS  TO  WHICH  SSM  INFORMATION  SHOULD  BE 

ADDRESSED 

The  proposed  design  of  the  SSM  addresses  warning,  caution,  precaution, 
and  advisory  messages  and  relevant  data  through  the  visual  sensory  channel. 
Auxiliary  presentation  of  SSM  information  through  the  auditory  channel 
was  deemed  worthy  of  inclusion  in  long-term  designs,  subject  to  experimental 
research  and  testing,  since  the  following  factors  support  use  of  voice 
warning  as  a  mode  of  alerting  and  data  transmission: 

1.  The  visual  channel  is  heavily  loaded  during  NOE  flight. 

2.  Voice  warning  may  prove  more  attention-getting  than  visual  warning. 

3.  Pilots  interviewed  have  favored  reconsideration  of  voice  warning. 

Voice  warning  systems  have  been  developed  and  tested  in  the  past. 

Unfavorable  results  have  been  due  mostly  to  the  following  factors: 

1.  Voice  warning  systems  that  involve  the  use  of  taped  messages 
have  suffered  from  reliability  problems  (e.g.,  tape  breakage  or  stretching) 
and  access  time  lag,  Including  wi thin -mess age  lag  between  words  or  phrases. 

2.  Provisions  for  intensity  dinning  have  often  not  been  Included. 

3.  Voice  warning  has  been  provided  only  as  a  backup  system,  in 
some  cases  as  a  third  or  fourth  warning  backup.  As  such,  it  has  not 
generally  been  tested  thoroughly  on  its  own  merits,  and  has  frequently 
been  deemed  by  pilots  to  be  a  nuisance,  especially  where  no  override 
capability  has  been  provided. 

Current  technology  has  advanced  beyond  previous  tape  systems  to 
include  production  of  synthesized  voice  through  a  variety  of  digitized 
storage  strategies.  The  following  questions  require  experimental  testing 
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before  synthesized  voice  warning  can  be  recommended  as  a  primary  system: 

1.  What  are  the  most  effective  frequency  ranges  and  speech  character¬ 
istics  (male  vs.  female,  "robot"  vs.  human,  tone  of  voice,  rapidity  of 
speech,  etc.)  that  combine  speech  intelligibility  with  distinguishing 
characteristics  that  differentiate  the  voice  warning  messages  from  other 
voice  communications? 

2.  Is  human  reliability  superior  under  voice  warning  conditions  or 
under  visual  warning  conditions? 

3.  Are  voice  warning  data  transmission  rates  fast  enough  to  permit 
effective  response? 

4.  Can  and  should  voice  warning  be  relied  upon  to  present  information 
beyond  alerting  and  announcing,  to  include  data  presentation,  emergency 
procedures  presentation,  commands,  etc.? 

5.  How  is  voice  warning  most  effectively  integrated  with  other 
communications  in  terms  of  prioritization,  crew  interaction,  etc.? 

6.  Can  and  should  voice  warning  be  extended  to  other  functions 
beside  subsystem  status  monitoring? 

7.  What  design  features  can  maximize  the  effectiveness  of  voice 
warning  (e.g.,  cueing  or  alerting  tone  prior  to  voice  message,  optimal 
coding  of  messages)? 

It  is  recomnended  that  laboratory  and  flight  evaluation  of  current 
and  future  voice  warning  systems  be  undertaken.  Such  evaluations  should 
both  evaluate  specific  technologies  and  establish  generic  principles  to 
guide  the  development  of  voice  warning  systems.  Evaluative  study  of  voice 
warning  configurations  and  combined  voice/ visual  configurations  should 
include  experimental  measurement  of  performance  variables  such  as  error 
rate,  reaction  time,  and  other  measures  of  human  reliability  and  workload. 

SUGGESTION  OF  DISPLAY  LOCATIONS 

Existing  subsystem  status  monitoring  is  characterized  by  three 
separate  display  locations: 

1.  A  master  warning/ caution  display  which  consists  of  warning 
lights  which  illuminate  to  alert  that  a  warning  condition  is  in  effect 
and  inform  the  nature  of  the  condition,  and  a  master  caution  light  which 
alerts  that  a  caution  condition  is  in  effect,  without  identifying  the 
condition. 

2.  A  caution/ advisory  panel  which  serves  to  identify  the  parameters 
that  are  out  of  tolerance  for  caution  conditions,  without  qualitative 
or  quantitative  indication  of  parameter  level. 

3.  Subsystem  instruments  which  provide  qualitative  and/or  quantita¬ 
tive  data  for  specified  parameters. 

The  proposed  SSM  will  include  all  three  of  the  above  functions,  but 
will  combine  them  into  two  separate  displays,  which  should  be  located 
in  such  a  fashion  as  to  optimize  crew  alerting  and  permit  transmission  of 
visual  information  with  minimal  eye  or  head  movement  on  the  part  of  the 
crew  member  who  must  otherwise  attend  to  the  outside  world.  The  two 
displays  consist  of  a  main  display  screen  and  a  separate  cautlon/wamlng/ 
precaution  (CWP)  display.  The  CWP  display  will  serve  the  purpose  of 
alerting  and  identifying  warning,  caution,  and  precaution  conditions,  and 


will,  for  selected  parameters,  Identify  the  quantitative  condition  of 
those  parameters.  The  Ideal  location  for  the  CUP  display  Is  currently 
approximated  by  the  master  waming/master  caution  lights*  and  it  is 
recommended  that  this  CWP  display  be  inset  into  the  leading  edge  of  the 
glare  shield  directly  in  front  of  the  pilot  and  the  copilot,  a  separate 
display  being  provided  for  each. 

Additional  SSM  information  (including  relevant  system  data,  a  record 
of  current  out-of-tolerance  conditions,  all  manually  accessed  information 
and  display  of  any  peripherally  accessed  information)  should  be  presented 
separately  on  the  main  screen  display,  in  a  location  where  relevant 
system  data  is  readily  viewable  with  a  minimal  amount  of  eye  or  head 
movement  within  the  constraints  of  available  instrument  panel  space,  and 
within  reach  of  pilot  and  copilot  for  operation  of  controls.  It  is  recom¬ 
mended  that  a  separate  main  screen  display  be  provided  for  pilot  and  for 
copilot,  and  that  these  screens  be  located  in  the  instrument  panel  as 
close  to  die  crew  members  as  possible  in  the  areas  left  vacant  by  the 
removal  of  the  dedicated  subsystem  instruments  replaced  by  the  SSM. 

In  the  OH-58C  only  one  of  each  display  is  necessary  and  should  be 
located  equidistant  from  pilot  and  copilot.  In  the  AH-1G,  a  tandem 
helicopter,  separate  displays  should  be  provided  for  gunner  and  pilot. 

Figures  1  through  4  illustrate  anticipated  changes  achieved  by 
installation  of  the  proposed  SSM  displays  for  the  UH-60A  and  the  OH-58C. 

SUGGESTION  OF  DISPLAY  FORMATS  AND  SYMBOLOGY 

The  development  of  display  formats  and  symbology  was  guided  by  the 
recommendations  in  Tables  27  through  30  which  specify  quantitative  vs. 
qualitative  vs.  combined  display  formats.  In  addition,  review  of  literature 
on  symbology  and  formats  resulted  in  the  following  guidelines: 

1.  Tendencies  to  abuse  the  flexibility  of  electronic  display  devices 
by  displaying  excess  information  in  high  density  should  be  avoided  in 
favor  of  emphasis  upon  the  display  of  essential  but  nonsuperf luous 
information. 

2.  Quantitative  information  should  be  displayed  digitally  with 
appropriate  scaling  incorporated  where  necessary  to  prevent  digit  flicker. 

3.  Qualitative  information  should  include  provisions  for  indication 
of  movement  within  zones  and  for  indication  of  critical  limits. 

4.  Where  qualitative  and  quantitative  information  is  presented 
together  for  a  given  parameter,  scale  markings  may  be  eliminated  and 
qualitative  and  quantitative  indications  kept  distinct. 

5.  Where  several  system-related  parameters  are  displayed  simultan¬ 
eously,  out-of-tolerance  parameters  should  be  highlighted. 

6.  Where  analog  information  for  several  system-related  parameters  is 
displayed,  the  analog  scales  should  be  calibrated  to  allow  for  quick- 
scan  comparison  of  parameters. 

7.  All  formats  should  be  submitted  to  experimental  evaluation  before 
a  final  hardware/ software  decision  is  made. 

Suggestion  Of  Mode  For  Control  Reaction  Feedback 

The  SSM  should  duplicate  the  logic  of  existing  subsystem  status 


Figure  2.  Illustration  of  SSM  installation  in  the  UH-60A 


CWP  DISPLAY 


Figure  4.  Illustration  of  SSM  installation  in  the  OH-58C 


Indicators:  corrective  response  results  in  the  erasure  of  the  caution 
indication.  This  logic  possesses  inherent  advantage  in  that  it  elevates 
the  SSM  to  the  status  of  command  display.  That  is,  the  simplest  logic 
within  the  environment  of  high  workload  NOE  flight  is  a  command  logic 
that  specifies  that  the  crew  need  respond  only  if  information  appears. 

An  empty  screen  constitutes  feedback  that  appropriate  control  reactions 
have  been  made.  The  removal  of  indications  by  corrective  action  reduces 
the  command  statements  without  requiring  the  crew  to  monitor  excess 
feedback.  Should  workload  permit,  additional  feedback,  though  not  re¬ 
quired,  is  attainable  through  manual  access. 

Design  Of  Candidate  Display  Formats 

Figures  5  through  18  illustrate  the  basic  display  formats.  Figures  19 
through  32  illustrate  display  formats  through  presentation  of  an  hypo¬ 
thesized  scenario.  Parameters  displayed  throughout  have  been  taken  from 
the  UH-60A,  and  the  emphasis  throughout  has  been  upon  illustration  of 
display  operation  and  formats  rather  than  upon  fidelity  of  mission 
scenario. 

Figure  5  illustrates  the  basic  display  elements.  To  the  traditional 
master  caution  and  master  warning  light  has  been  added  a  master  precaution 
light.  While  the  master  caution  and  master  warning  lights  are  triggered 
by  exceedance  of  preestablished  limits,  the  precaution  light  is  triggered  , 
by  a  combination  of  exceedance  of  preestablished  precaution  limits  and  a 
rate  of  approach  to  caution  limits.  Thus,  the  precaution  anticipates 
caution  or  warning  conditions.  All  three  lights  are  "press  to  reset" 
operated.  The  warning  light  flashes  red,  and  the  caution  and  precaution 
lights  flash  amber.  The  small  screen  located  between  the  caution  and 
warning  lights  is  labeled  a  Caution/ Warning/ Precaution  (CWP)  Display.  The 
CWP  is  a  multi-function  display  and  is  ideally  collimated  for  compatibility 
with  night  vision  goggles,  requiring  no  refocusing  of  the  goggles  from 
out-of-cockpit  focus  for  viewing.  Whenever  a  precaution,  caution,  or 
warning  condition  occurs,  the  appropriate  light  illuminates  and  the 
appropriate  message  appears  on  the  CWP  display.  All  such  messages  are 
prioritized.  In  the  event  of  simultaneous  out-of -tolerance  conditions, 
the  highest  priority  message  is  displayed  until  acknowledged  by  pressing 
to  reset.  Until  "bumped"  by  a  new  message,  the  highest  priority  message 
will  remain  on  the  CWP  display.  For  every  parameter  listed  in  Tables  27 
through  30  as  involving  precaution  display,  the  CWP  display  will  include 
digital  indication  of  parameter  status  in  addition  to  any  precaution 
or  caution  message  displayed.  The  horizontal  display  beneath  the  CWP 
display  is  a  Power  Management  Display  (PMD).  Its  arrowhead  cursor  moves 
horizontally,  driven  by  the  one  of  the  following  parameters  which  is 
closest  to  its  limit  at  any  given  time:  torque,  NG,  and  TGT.  The 
vertical  line  on  the  PMD  represents  the  caution  limit  for  the  above 
parameters.  Ideally  this  PMD  is  also  collimated  for  compatibility  with  the 
night  vision  goggles.  To  the  left  of  the  CWP  and  PMD  is  a  dedicated 
Rotor  Speed  (NR)  display,  which  includes  dedicated  digital  readout  of 
NR  and  directional  arrows  that  illuminate  when  a  specified  rate  of 
Increase  or  decrease  in  main  rotor  speed  is  exceeded,  and  which  indicate 
direction  of  change.  The  arrows  are  not  command  displays. 
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The  larger  display  screen  with  associated  control  buttons  In  Figure  5 
Is  the  main  SSM  display.  It  Is  a  multi-function  display  allowing  for 
both  automatic  and  manually  accessed  display  of  subsystem  information. 
Whenever  a  precaution,  caution,  or  warning  message  appears  on  the  CWP 
display,  the  message  is  also  automatically  displayed  on  the  main  screen, 
where  it  remains  until  the  condition  is  corrected.  In  the  case  of  fuel, 
engine,  XMSN,  and  APU  parameters,  a  precaution,  caution,  or  warning 
message  for  any  individual  parameter  automatically  calls  up  all  related 
system  parameters  on  the  main  screen.  Advisory  messages  are  displayed 
automatically  on  the  main  display,  where  they  remain  until  the  condition 
is  changed.  Related  fuel,  engine,  XMSN,  hydraulic,  electrical,  and  APU 
parameters  can  be  accessed  manually  by  pushing  the  appropriate  dedicated 
button  beneath  the  main  display.  All  parameters  are  displayed  on  the  main 
SSM  in  prioritized  fashion;  highest  priority  parameters  appear  higher  ver¬ 
tically  on  the  screen.  System-related  parameters  are  displayed  together 
for  fuel,  engine,  and  XMSN  systems  in  the  vertical  location  assigned  to 
the  parameter  within  the  system  that  has  been  assigned  highest  priority. 

Any  information  manually  accessed  is  granted  highest  priority  and  may  be 
erased  by  a  second  depression  of  the  access  button.  Relative  positions 
of  parameters  displayed  as  part  of  a  related  system  (i.e.,  fuel,  engine, 
XMSN)  never  change,  though  the  prioritized  location  of  the  system  itself 
will  change  as  a  function  of  its  highest  priority  parameter. 

Where  two  displays  are  provided  (one  each  for  pilot  and  copilot  in 
the  UH-60A,  CH-47C,  and  AH-1G),  all  displays  except  the  precaution, 
caution,  and  warning  lights  function  independently.  Reset  of  precaution, 
caution,  and  warning  lights  by  one  crew  member  results  in  automatic  reset 
of  the  corresponding  light  for  the  other  crew  member.  Manual  access  of 
subsystem  information  on  the  main  screen,  in  contrast,  functions  indepen¬ 
dently  for  pilot  and  copilot. 

Review  Of  Display  Logic  And  Formats  With  U.S.  Army  Pilots 

The  display  logic,  operation,  and  formats  illustrated  in  Figures  1 
through  32  were  reviewed  by  the  same  U.S.  Army  helicopter  pilots  at  Ft. 
Rucker,  Alabama,  who  had  previously  provided  inputs  to  the  finalized 
definition  of  information  requirements  in  Task  I.  These  pilots  were  gener¬ 
ally  enthusiastically  supportive  of  the  display-by-exception  logic  and 
manual  access  feature.  The  CWP  display  was  deemed  the  feature  most  likely 
to  contribute  to  reduced  workload  during  NOE  flight.  Potential  contribu¬ 
tions  of  the  SSM  to  increased  visibility  through  reduced  instrument  panel 
size  were  mentioned,  and  Army  personnel  recommended  that  advantage  be 
taken,  especially  in  scout  aircraft,  of  the  SSM’s  replacement  of  dedicated 
subsystem  instrumentation  to  improve  the  overall  instrument  panel  configu¬ 
ration.  Decisions  to  display  the  highest  priority  message  on  the  CWP  screen, 
to  highlight  out-of-tolerance  parameters  on  the  SSM  main  screen,  and  to 
emphasize  the  command  philosophy  of  the  SSM  (displayed  information  commands 
attention  and  response;  blank  screens  indicate  no  action  to  be  taken)  were 
firmed  through  Army  pilot  interviews.  In  addition,  during  one-week  follow¬ 
up  interviews,  peripheral  functions  that  could  be  performed  by  the  SSM 
were  discussed.  These  peripheral  functions  are  described  in  Task  V. 
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Figure  5.  Subsystem  Status  Monitor  display  elements 
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The  FUEL  display  has  been  manually  accessed.  Manual 
access  Is  Indicated  by  the  cursor  above  the  FUEL 
button.  For  FUEL,  ENGINE,  XMSN,  and  APU,  manually  accessed 
display  format  is  identical  to  the  automatically 
displayed  format. 


Figure  6.  Fuel  system  display. 


The  ENGINE  system  has  been  manually  accessed.  Scale 
markings  have  been  eliminated,  leaving  only  a  dotted 
vertical  line  with  vertically  moving  cursors  for  analog 
scales.  All  analog  scales  for  related  parameters  are 
calibrated.  Horizontal  lines  indicate  upper  and  lower 
caution  limits.  Quantitative  digital  readouts  are 
displayed  beneath  each  analog  scale. 

Figure  7.  Engine  system  display. 
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Figure  8.  XMSN  system  display. 
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The  HYDRAULICS  system  will  be  displayed  only  by 
manual  access,  though  the  status  of  individual 
parameters  will  be  automatically  displayed  during 
caution  conditions.  No  analog  scales  are  displayed 
after  manual  access,  and  automatically  displayed 
caution  status  messages  do  not  include  digital 
readouts. 

Figure  9.  Hydraulics  system  display. 
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The  ELECTRICAL  system  will  be  displsyed  only  by 
sianuei  access,  though  the  status  of  lndivldusl 
parameters  will  be  automatically  displayed  during 
caution  conditions.  No  analog  scales  are  displayed 
after  manual  access,  and  automatically  displayed 
caution  status  messages  do  not  include  digital 
readouts. 


Figure  10.  Electrical  system  display 
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Tha  APU  system,  like  FUEL,  ENG  AND  XMSN  systems,  will 
be  automatically  diaplayed  when  one  of  ita  parametera 
exceeds  ita  limit, and  may  be  manually  accessed.  No 
analog  scales,  however,  are  displayed  for  the  APU 
system. 

Figure  11.  APU  system  display. 
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A  if  1  TGT  HIGH  precaution  condition  has  occurred.  The 

precaution  light  is  illuminated.  The  CWP  display  Indicates 
the  message  with  associated  digital  readout  of  status. 

The  PMD  cursor  has  moved  toward  the  limit  line.  The 
entire  engine  system  has  been  automatically  displayed 
on  the  main  screen,  and  the  TGT  cursor  has  moved 
vertically  toward  the  limit  line. 


Figure  12.  Sample  precaution  display. 
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There  are  two  seta  of  caution  messages : those  that  automatic¬ 
ally  call  up  display  of  the  entire  system  of  which  they  are 
a  part,  and  those  which  are  displayed  alone.  Distinctions 
are  identified  in  Tables  27  through  30  in  Appendix  A. 

#1  PRI  SERVO  JAM  does  not  call  up  the  entire  hydraulic 
system.  Its  caution  message  is  displayed  on  both  the  CUP 
and  main  displays.  It  will  remain  on  the  CUP  so  long  as 
it  represents  the  highest  priority  message,  or  is  temporarily 
replaced  by  a  later  message  of  lower  priority,  and  will 
remain  on  the  main  screen  until  the  condition  is  corrected. 


Figure  13.  Sample  caution  display 


A  #1  TGT  HIGH  caution  condition  results  In  automatic 
display  of  the  engine  system  on  the  main  screen,  where 
the  TGT  cursor  has  moved  beyond  the  limit  line  and  the 
TGT  digital  readout  has  been  boxed  to  highlight  the 
overlimit  parameter.  The  caution  light  is  illuminated. 
The  message  and  associated  digital  readout  has  appeared 
on  the  CWP  display.  The  CWP  will  include  digital  readout 
of  a  parameter  if  that  parameter  calls  up  an  entire 
system  on  the  main  screen.  The  power  management  cursor 
has  moved  beyond  the  limit  line. 

Figure  14.  Sample  caution  display. 
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A  LOW  ROTOR  RPM  warning  has  occurred.  The  warning  light 
has  been  reset.  The  LOW  ROTOR  RPM  message  continues,  with 
digital  readout,  on  the  CWP  display.  The  dedicated  NR 
display  presents  rotor  speed  digitally,  and  the  arrow 
Indicates  that  NR  Is  decreasing.  The  engine  system  para¬ 
meters  have  been  automatically  displayed  on  the  main 
screen.  The  main  display  shows  NR  in  combination  with 
decreased  NP,  and  a  current  but  previously  announced 
#1  TGT  caution.  All  are  boxed  for  highlight,  and 
relevant  cursors  have  moved  beyond  limit  lines. 

Figure  17.  Sample  LOW  ROTOR  RPM  condition. 
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LOW  FUEL  precaution  limit  has  been  preset  at  45  minutes. 
Presetting  of  the  LOW  FUEL  precaution  limit  has  been 
accomplished  through  the  peripheral  keyboard,  described 
later  In  Task  V.  Tank  #1  has  been  depleted  to  this  level. 
The  precaution  light  has  Illuminated  and  the  fuel  system 
has  been  automatically  displayed  on  the  main  screen. 


Figure  19.  Sample  scenario  display. 
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XMSN  oil  temperature  has  reached  precaution  limits* 
The  precaution  light  has  illuminated,  and  the  XMSN 
OIL  TEMP  message  and  digital  readout  have  appeared 
on  the  CWP  display.  On  the  main  screen,  the  XMSN 
system  has  been  automatically  displayed,  and  the 
fuel  system,  which  is  in  a  lower  priority,  has  moved 
down  on  the  screen. 


Figure  20.  Sample  scenario  display 
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XMSN  oil  temperature  has  reached  the  caution  limit. 
The  caution  light  has  illuminated,  and  the  XMSN  OIL 
TEMP  message  and  digital  readout  have  been  displayed 
on  the  CWP  display.  On  the  main  screen,  the  XMSN  TEMP 
digital  readout  has  been  boxed,  and  the  cursor  has 
moved  above  the  limit  line. 

Figure  21.  Sample  scenario  display. 
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#1  TGT  has  reached  precaution  limits.  The  precaution 
light  has  illuminated  and  the  #1  TGT  HIGH  message 
and  digital  readout  have  appeared  on  the  CUP  display. 
The  power  management  cursor  has  moved  toward  the  limit 
line.  On  the  main  screen,  the  XMSN  system,  in  a  caution 
condition,  maintains  its  priority.  The  engine  system, 
of  higher  priority  than  the  fuel  system,  has  "bumped" 
the  fuel  system  beyond  the  screen  capacity.  A  "1/2" 
indication  in  the  upper  right  hand  corner  of  the  main 
screen  indicates  that  the  first  of  two  pages  of  screen 
information  is  currently  displayed. 


Figure  22.  Sample  scenario  display 


Figure  23.  Sample  scenario  display 
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#1  FUEL  has  now  reached  the  caution  level.  The  caution 
light  has  illuminated  and  the  #1  FUEL  LOW  message 
and  digital  readout  have  appeared  on  the  CWP  display. 
The  PMD  cursor  maintains  its  position.  Since  fuel  is 
now  in  a  caution  condition  while  engine  remains  in  a 
precaution  condition,  fuel  has  "bumped"  engine  to  Page 
2.  Fuel  #1  TIME  TO  GO  and  LBS  readouts  on  the  main 
screen  have  been  boxed  for  highlight.  Page  1  has  been 
manually  reaccessed. 


Figure  24.  Sample  scenario  display 
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The  caution  light  hag  been  react  and  the  second  page 
haa  been  manually  accessed.  The  XMSN  OIL  TEMP  HIGH 
message  remains  of  highest  priority  and  has  returned 
to  the  CWP  display. 


Figure  25.  Sample  scenario  display 


#2  FUEL  has  reached  precaution  level.  The  precaution 
light  has  illuminated,  and  the  #2  FUEL  LOW  message 
and  digital  readout  have  appeared  on  the  CWP  display. 
Page  1  of  the  main  screen  has  been  manually  accessed. 


Figure  26.  Sample  scenario  display 


#1  TGT  has  reached  caution  limit.  The  caution  light 
has  illuminated  and  the  #1  TGT  HIGH  message  and 
digital  readout  have  appeared  on  the  CVJP  display.  The 
PHD  cursor  has  moved  beyond  the  limit  line.  On  the 
main  screen,  the  engine  system  has  "bumped"  the  fuel 
system  to  Page  2.  The  TGT  digital  readout  has  been 
boxed  for  highlight  and  the  cursor  has  ascended 
beyond  the  limit  line. 


Figure  27.  Sample  scenario  display 


The  caution  light  has  been  reset,  and  Page  2  has 
been  manually  accessed.  The  XMSN  OIL  TEMP  HIGH 
message  and  digital  readout  have  returned  to  the 
CWP  display.  The  PMD  cursor  has  remained  beyond 
the  limit  line. 


figure  28.  Sample  scenario  display 
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The  XMSN  oil  temperature  has  returned  to  within 
normal  limits  and  has  disappeared  from  the  CWP 
and  main  displays.  The  #1  TGT  HIGH  condition  is 
now  of  highest  priority  and  is  displayed  on  the 
CWP  display.  The  PMD  cursor  remains  beyond  the 
limit  line.  Engine  and  fuel  systems  are  prioritized 
and  displayed  on  the  main  screen. 


Figure  29.  Sample  scenario  display. 


The  XMSN  system  has  been  manually  accessed  and  appears 
at  the  top  of  the  main  screen.  A  cursor  above  the 
XMSN  button  indicates  the  manual  access.  The  fuel 
system  has  been  "bumped"  to  Page  2,  and  a  "1/2" 
indication  has  appeared.  The  #1  TGT  HIGH  message 
remains  on  the  CWP  display,  and  the  PMD  cursor 
remains  beyond  the  limit  line. 

Figure  30.  Sample  scenario  display. 
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Page  2  has  been  accessed,  and  the  fuel  system  is 
displayed*  A  "2/2"  indication  has  appeared*  The 
CWP  #1  TGT  HIGH  display  and  the  PMD  cursor  remain 
unchanged. 

Figure  31.  Sample  scenario  display. 
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PRESSURE  tO  PSi  12  PSl 


#1  XGT  has  returned  to  within  normal  limits,  and  TGT 
displays  have  disappeared  from  the  CWP  and  main  displays. 
There  is  no  display  overflow  to  a  second  page.  The  XMSN 
system  has  been  removed  from  the  main  screen  by  a  second 
depression  of  the  XMSN  button.  Only  the  fuel  system 
now  involves  exceedance.  The  #1  FUEL  LOW  message  and 
digital  readout  appear  on  the  CWP  display,  and  the 
fuel  system  is  displayed  on  the  main  screen. 

Figure  32.  Sample  scenario  display. 


Evaluation  Of  Control  Allocation  Concepts 

"Control  allocation"  is  a  term  referring  to  the  decision-making 
algorithms  by  which  a  computer  monitors  system  operation,  decides  when 
corrective  response  is  required,  and  decides  whether  to  perform  the 
corrective  response  by  itself  or  to  inform  the  human  operator  of  the 
condition,  allowing  him  to  perform  the  response.  In  advanced  control 
allocation  schemes,  the  computer  adjusts  its  algorithms  in  a  fashion 
analogous  to  human  learning,  by  monitoring  the  consistency  and  effec¬ 
tiveness  of  the  human  operator's  responses.  In  view  of  the  long-term 
nature  of  such  control  allocation  concepts  and  current  pilots'  preference 
for  human  as  opposed  to  machine  (computer)  control  over  in-flight 
decision-making,  control  allocation  was  judged  to  be  beyond  the  scope 
of  the  SSM  as  presently  envisioned.  It  is,  however,  predicted  that  in 
the  long  term,  control  allocation  concepts  will  be  found  more  applicable 
to  such  functions  as  subsystem  monitoring,  and  a  detailed  discussion 
of  control  allocation  concepts  is  presented  in  Appendix  C. 

Determination  Of  Most  Effective  Means  Of  Displaying  Emergency  Procedures. 

The  dilplay  of  emergency  procedures  in  response  to  warning  and 
caution  conditions  was  investigated  as  a  potentially  useful  feature 
of  the  SSM  that  would  contribute  to  the  reduction  of  crew  workload  and 
the  enhancement  of  mission  effectiveness.  Helicopter  pilots  at  Ft. 

Rucker,  Alabama,  ruled  out  a  system  logic  that  would  display  emergency 
procedures  automatically  in  response  to  the  occurrence  of  warning  and 
caution  conditions,  but  confirmed  that  an  SSM  feature  permitting 
manual  access  of  emergency  procedures  would  reduce  crew  workload  and 
enhance  mission  effectiveness.  Though  the  SSM  design  includes  an  EMER  PROCED 
button  beneath  the  main  screen  for  accessing  emergency  procedures,  the 
mode  of  operation  of  the  EMER  button  and  related  emergency  procedures 
display  formats  are  discussed  in  detail  in  Task  V. 
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TASK  Ills  PRELIMINARY  DESIGNS 


Three  preliminary  designs  of  system  architecture  were  prepared 
using  the  UH-60A  as  a  case  study.  System  unit  functions  will  be  discussed 
in  detail  for  the  first  design,  and  features  that  differ  for  the  second 
and  third  designs  will  also  be  discussed  in  detail. 

The  three  preliminary  designs  were  identified  as  follows: 

1.  Current:  Technology  is  currently  available  for  constructing 
all  system  components  described,  though  some  development  would  be 
required  for  the  specific  applications  identified. 

2.  Near-term:  It  is  predicted  that  the  technology  required  for 
construction  of  some  of  the  system  components  described  will  be  available 
subsequent  to  development  within  5-10  years. 

3.  Long-term:  It  is  predicted  that  the  technology  required  for 
construction  of  several  of  the  system  components  described  will  not  be 
available  within  10  years. 

Though  the  three  designs  have  been  distinguished  by  temporal  labels, 
it  must  be  noted  that  temporal  predictions  of  availability  of  electronic 
technology  are  difficult  at  best.  The  development  of  flat  panel  display 
technology,  for  example,  has  lagged  behind  previous  industry  predictions, 
though  imminent  solutions  are  constantly  being  promised.  The  development 
of  computerized  voice  interactive  systems  (speech  recognition  and  speech 
synthesis)  has  involved  sudden  breakthroughs,  though  application  problems 
currently  exist  whose  solution  time  is  difficult  to  predict  accurately. 

Fiber-optics  data  transmission  is  currently  a  reality,  though  aircraft 
applications  of  fiber-optics  data  bussing  must  still  face  such  problems 
as  signal  loss  and  connector  efficiency. 

The  difficulty  of  predicting  the  time  factor  is  not  limited  to 
hardware.  Though  airborne  computers  are  currently  a  reality,  such  problems 
as  sensor  failure  analysis  through  systems  modelling  require  powerful 
software  programs  whose  development  time  is  difficult  to  predict. 

Therefore,  although  the  three  preliminary  designs  have  been  distin¬ 
guished  by  temporal  labels,  they  are  best  distinguished  by  their  distinctive 
components.  Were  all  required  hardware  and  software  currently  available, 
the  second  design  offers  more  mission  effectiveness  than  the  first,  and 
the  third  more  than  the  second. 

CURRENT  DESIGN 

The  architecture  of  the  current  design  is  presented  in  Figure  33. 

Caution/ Warning/ Precaution  Display  (CWP  Display) 

C/W/P  lights  are  provided  for  both  pilot  and  copilot.  Triggers  for 
C/W/P  lights  are  identified  in  Tables  35  through  38  in  Appendix  A. 

Caution  and  Warning  lights  are  triggered  by  exceedance  of  predefined 
limits.  The  Precaution  light  is  triggered  by  a  combination  of  exceedance 
of  predefined  limit  and  rate  of  parameter  movement  toward  a  predefined 
caution  limit.  The  predefined  precaution  limit  for  a  FUEL  LOW  precaution 
may  be  redefined  by  pilot  or  copilot  through  the  perpiheral  keyboard 
described  in  Task  V.  Pilot  and  copilot  CWP  lights  and  displays  are 
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interconnected*  but  redundant.  Resetting  of  CUP  lights  by  either  crew 
member  accomplishes  resetting  for  the  other  crew  member's  display  as  well. 
CUP  messages  and  their  prioritization  are  defined  in  Tables  27  through  30 
and  35  through  38  in  Appendix  A.  Operation  of  the  CUP  display  was  illustra¬ 
ted  in  Task  II. 

Power  Management  Display  (PMD) 

A  PHD  accompanies  each  CUP  display.  Operation  of  the  PMD  was  illustra¬ 
ted  in  Task  II. 

Rotor  RPM  Display  (NR  Display) 

An  NR  display  provides  dedicated  digital  readout  of  NR  to  both 
pilot  and  copilot.  Operation  of  the  NR  display  was  Illustrated  in  Task  II. 

Main  SSM  Display  Screen  (SSM  Display) 

A  Main  SSM  display  is  provided  for  both  pilot  and  copilot*  for  the 
display  of  system-related  parameters,  prioritized  CUP  messages,  manually 
accessed  subsystem  information,  and  peripheral  information.  Information 
displayed  on  the  Main  SSM  display  is  itemized  and  prioritized  in  Tables 
27  through  30  and  35  through  38  in  Appendix  A.  Related  system  parameters 
are  defined  in  Tables  27  through  30  and  Tables  31  through  34  in  Appendix 
A.  Peripheral  information  and  display  formats  are  defined  in  Task  V. 
Operation  of  the  Main  SSM  display  and  associated  screen  control  buttons 
was  illustrated  in  Task  II.  Operation  of  a  peripheral  keyboard  associated 
with  the  Main  SSM  display  is  illustrated  in  Task  V. 

Flight  Data  Recorder  (FDR) 

An  onboard  FDR  will  automatically  record  the  following  information 
whenever  an  out-of-tolerance  condition  occurs  for  parameters  so  identified 
in  Tables  27  through  30  in  Appendix  A,  and  during  the  course  of  that 
condition:  status  of  out-of -tolerance  parameter,  time  of  occurrence, 
duration  of  condition,  and  cumulative  frequency  of  condition  occurrence 
since  most  recent  playback.  In  addition,  for  specified  parameters  the 
FDR  will  also  record  the  condition  of  related  parameters.  Table  39  in 
Appendix  A  lists  these  parameters  for  the  UH-60A.  Recording  is  terminated 
when  all  related  parameters  have  returned  to  within  normal  limits.  Manually 
directed  recording  may  be  accomplished  through  a  RECORD  switch  located 
on  the  peripheral  Flight  Data  Entry  Panel  keyboard*  and  terminated  by 
a  second  depression  of  the  switch.  It  is  anticipated  that  playback  of 
recorded  flight  data  will  be  accomplished  through  plug-in  peripheral 
devices,  though  changes  in  the  Flight  Data  Entry  Panel  could  be  made 
to  allow  for  command  of  on-board  playback  on  the  Main  SSM  display. 

Flight  Data  Entry  Panel  (FDEP) 

The  FDEP  is  a  peripheral  function  device  whose  operation  will  be 
discussed  in  detail  in  Task  V.  A  removable  and  stowable  FDEP  is  provided 
for  both  pilot  and  copilot  for  entering  and  accessing  data  for  performance 


calculations,  checklists  other  than  emergency  procedures,  and  weight 
monitoring.  The  FDEP  will  be  linked  to  the  Central  Data  Processing  Units 
through  an  electronic  umbilical  cord,  when  on-board,  and  may  be  used  as 
a  performance  calculator  during  flight  briefings,  when  unplugged. 

Central  Data  Processing  Units  (CDPU's) 

Two  CDPU's  will  perform  digital  conversion  of  analog  sensor  signals, 
process  digitized  sensor  data  by  comparison  with  preestablished  limits, 
perform  self-BIT  and  command  BIT  for  displays,  provide  symbol  generation 
for  displays,  provide  prioritization  logic  for  displays,  provide  displays 
and  controls  with  data  logic  and  synchrony,  provide  computation  capability 
for  performance  monitoring,  store  checklists  and  procedures  for  display, 
scale  simultaneously  displayed  analog  formats  and  digital  displays, 
provide  commands  and  data  to  the  FDR,  and  perform  sensor  failure  analysis. 

Sensor  failure  analysis  will  be  performed  through  modelling  procedures 
and/or  sensor  comparisons.  For  engine  parameters,  a  mathematical  model  of 
the  engine  will  be  programmed  into  the  CDPU's  and  all  monitored  parameters 
will  be  inserted  into  the  model.  Any  parameter  that  does  not  conform  to 
the  model  will  be  considered  invalid  and  its  sensor  will  be  considered 
inoperative.  Where  practical,  multiple  redundant  sensors  will  be  used 
and  by  comparison  of  data  received,  the  appropriate  operating  sensor 
will  be  selected.  Sensor  failures  will  be  recorded  by  the  FDR.  Where 
failed  sensors  result  in  inability  to  report  reliable  messages  to  the 
crew,  sensor  failure  will  be  announced.  Prioritization  of  announced 
sensor  failure  messages  will  be  identical  to  the  warning  or  caution 
priority  of  the  corresponding  parameter. 

Data  Transmission 

Signal  sources  for  the  UH-60A  are  included  in  Figure  33.  Each  sensor 
is  wired  directly  to  each  CDPU.  Where  sensor  failure  analysis  requires 
triply  redundant  sensors,  this  redundancy  will  be  provided.  Each  CDPU  is 
directly  wired  to  each  display  and  set  of  controls.  In  addition,  CDPU's 
are  interlinked,  sharing  functions  and  passing  control. 

NEAR-TERM  DESIGN 

Figure  34  illustrates  system  architecture  for  the  near-term  design. 

Multiplexed  electronic  data  transmission  was  employed  in  the  near- 
term  design  on  the  basis  of  the  following  predicted  advantages  of 
multiplexing: 

1.  Improved  reliability  through  redundancy,  high  reliability 
components,  fewer  components,  and  improved  component  derating  and 
thexmal  design. 

2.  Reduced  electromagnetic  interference  (EMI):  Fewer  and  shorter 
wires  mean  less  EMI  pickup  surfaces;  simple  two-wire  busses  can  be 
easily  and  more  extensively  shielded;  and  pulsed  digital  signals  are 
inherently  less  susceptible  to  EMI  than  conventional  analog  signals. 

3.  Enhanced  maintainability:  Multiplex  systems  continuously  check 
the  validity  of  transmitted  and' received  signals  and  can  be  programmed 
to  display  discrepancies. 
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Figure  34. 


Near-term  design  architecture. 
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4.  Improved  survivability:  Redundant  and  separate  units,  reduced 
number  of  components,  and  fewer  and  shorter  associated  wiring  results  in 
an  estimated  50%  reduction  of  system-presented  areas. 

5.  Improved  flexibility:  Software  changes  instead  of  extensive 
aircraft  modifications  required  to  add  future  systems;  equipment  can  be 
located  at  optimum  location  for  performance,  balance,  etc.,  without 
wiring  constraints;  and  reconfiguration  for  specific  missions  is  simpli¬ 
fied. 

The  near-term  design  is  identical  to  the  current  design  with  the 
exception  of  the  use  of  multiplexed  data  bussing  for  data  transmission 
and  the  inclusion  of  remote  data  processing  terminals. 

Remote  Terminals  (RT's) 

Five  RT's  perform  the  following  functions:  analog  to  digital  con¬ 
version  of  sensor  signals,  sensor  failure  analysis,  data  storage  for 
transmission  to  CDPU's  upon  command,  and  BIT  as  commanded  by  CDPU's. 

The  internal  system  will  be  tested  by  programming  the  CDPU  to 
insert  test  words  periodically  into  the  sensor  inputs  of  the  RT's.  The 
RT's  will  process  these  test  words  as  though  they  were  received  from 
the  sensors.  When  the  test  word  is  received  back  at  the  CDPU,  it  will 
be  compared  to  the  test  word  sent,  and  any  discrepancy  will  indicate  a 
channel  fault.  The  channel  fault  will  be  relayed  to  the  FDR,  and  sensor 
data  through  that  channel  will  not  be  accepted  by  the  CDPU. 

Data  Transmission 

Sensors  are  grouped  and  wired  directly  to  their  respective  RT's. 

Data  is  transmitted  between  RT's  and  CDPU's  through  dual  redundant 
electronic  data  busses.  Data  between  CDPU's  and  all  displays  and  controls 
the  FDR,  and  the  FDEP  is  also  transmitted  through  electronic  data  bussing 
The  bussing  architecture  is  defined  in  Figure  34. 

While  Figure  34  represents  the  SSM  as  a  closed  system,  it  must  be 
noted  that  both  near-term  and  long-term  data  busses  are  likely  to  be 
shared  with  other  aircraft  systems,  as  are  the  CDPU's.  It  is  beyond  the 
scope  of  this  effort  to  define  these  other  systems  or  their  interaction 
with  the  SSM. 

LONG-TERM  DESIGN 

Figure  35  illustrates  the  system  architecture  for  the  long-term 
design.  The  long-term  design  is  identical  to  the  near-term  design  except 
for  the  use  of  fiber-optics  data  bussing  for  data  transmission  and  the 
addition  of  auxiliary  Voice  Warning  and  Voice  Recognition  systems. 

Data  Transmission 

In  the  long-term  design,  fiber-optics  data  bussing  replaces  the 
near-term  electronic  data  bussing.  Properties  of  fiber-optics  data 
transmission  are  compared  with  properties  of  electronic  data  transmission 
in  Table  40  in  Appendix  A. 


Auxiliary  Voice  Warning  System  (VWS) 

An  auxiliary  VWS  has  been  included  as  a  unit  in  the  long-term  design. 
This  unit  would  transmit  prioritized  voice  warning  messages  by  means  of 
computerized  voice  synthesis.  The  VWS  is  suggested  as  auxiliary  to  the 
CWP  display.  It  is  envisioned  that  when  experimental  and  simulation 
studies  have  determined  the  basic  requirements  for  a  synthesized  VWS 
and  have  approved  technology  candidates,  voice  warning  may  serve  as  the 
primary  system. 

Auxiliary  Voice  Recognition  System  (VRS) 

The  VRS  is  a  computerized  system  that  recognizes  and  understands 
human  speech  and  performs  verbally  commanded  functions.  Within  the  SSM, 
the  VRS  would  follow  verbal  commands  to  reset  CWP  lights,  display  Main 
SSM  display  information,  accept  FDEP  data  inputs,  and  display  commanded 
checklists  and  performance  information.  It  is  envisioned  that  the  VRS 
could  also  interact  with  other  aircraft  controls  to  be  determined  in  the 
future. 

There  is  in  fact  no  requirement  in  the  SSM  as  designed  for  the 
pilot  or  copilot  to  employ  manual  controls,  since  the  system  functions 
automatically  to  monitor  and  display  all  essential  Information*  The 
additionally  included  SSM  display  buttons  and  FDEP  keyboard,  which  are 
intended  for  optional  use  during  low  workload  conditions,  do  entail 
manipulation.  Since  current  helicopter  flight  controls  require  use  of 
both  hands,  any  system  that  eliminates  manual  workload  under  any  conditions 
is  of  potential  value.  The  applications  of  the  VRS  to  the  SSM  are  there¬ 
fore  useful  but  limited,  and  the  true  value  of  a  VRS  must  await  design, 
experimental,  and  simulation  studies  determining  the  possible  applications 
of  a  VRS  to  other  control  functions  and  the  adequacy  of  VRS  technology 
in  addressing  those  applications. 

SUMMARY  OF  SSM  UNIT  FUNCTIONS 

Each  of  the  designs  described  above  includes  displays  that  replace 
existing  subsystem  displays.  The  SSM  is  not  intended  as  an  auxiliary 
system,  but  rather  as  the  primary  system  for  monitoring  and  displaying 
the  status  of  aircraft  subsystems  in  a  manner  that  reduces  crew  workload 
and  enhances  mission  effectiveness,  especially  during  high  workload  NOE 
flight. 

The  listing  which  follows  identifies  the  units  defined  in  the  designs 
described  above,  and  outlines  their  functions. 


REMOTE  TERMINAL  (RT) 

SENSOR  INFORMATION  6ATHERING 
ANALOG  TO  DIGITAL  CONVERSION 
DIGITIZED  DATA  STORAGE 
SENSOR  FAILURE  ANALYSIS 
■IT  AS  COMMANDED  BY  CDFU 
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CENTRAL  DATA  PROCESSING  UNIT  (CDPU) 


DIGITIZED  SENSOR  DATA  PROCESSING 

SENSOR  DATA  COMPARISON  TO  PRE-ESTABUSHED  LIMITS 

PROVIDE  BIT  COMMANDS  TO  RT'S 

PROVIDE  COMPUTATION  CABAPILITV 

SUPPLY  DATA  TO  PD R 

PERFORM  SELF-BIT  FUNCTIONS 

PROVIDE  LOGIC  FOR  PRIORITIZED  DISPLAYS 

PROVIDE  SYMBOL  GENERATION  FOR  DISPLAYS 

PROVIDE  DATA,  LOGIC,  AND  SYNCHRONY  FOR  DISPLAYS  AND  CONTROLS 
STORE  AND  PROVIDE  DATA  AND  LOGIC  FOR  FDEP 


DISPLAYS 

PRESENT  CAUTION,  WARNING,  PRECAUTION,  AND  ADVISORY  MESSAGES  AND  DATA  AUTOMATICALLY 
PRESENT  SUBSYSTEM  STATUS  INFORMATION  WHEN  COMMANDED  MANUALLY 
PRESENT  EMERGENCY  PROCEDURES  WHEN  COMMANDED  MANUALLY 
PRESENT  FDEP  COMMANDS  AND  DATA  WHEN  COMMANDED  MANUALLY 

FLIGHT  DATA  ENTRY  PANEL  (FDEP) 

COMMAND  PERIPHERAL  FUNCTION  DISPLAYS 
INPUT  PERIPHERAL  FUNCTION  DATA 

FLIGHT  DATA  RECORDER  (FDR) 

RECORD  STATUS  OF  RELATED  PARAMETERS  DURING  OVER/UNDER  LIMIT  CONDITIONS 
RECORD  SENSOR  FAILURES 

AUXILIARY  VOICE  WARNING  SYSTEM  (VWS) 

PROVIDE  SYNTHESIZED  VOICE  WARNING  AND  CAUTtON  MESSAGES 

AUXILIARY  VOICE  RECOGNITION  SYSTEM  (VRS) 

INTERPRET  HUMAN  SPEECH  AND  COMMAND  CDPU  TO  DISPLAY  REQUESTED  DATA 


SCHEMATIZATION  OF  SYSTEM  LOGIC 

A  block  diagram  of  the  Subsystem  Status  Monitor  is  presented  in 
Figure  36.  Figure  37  illustrates  Waming/Caution  light  logic.  Figure 
38  illustrates  CUP  Display  logic.  Figure  39  illustrates  Power  Management 
Display  logic.  Figure  40  illustrates  NR  Display  logic.  Figure  41  illustrates 
rate  sensing  logic  for  the  Precaution  light.  Figure  42  illustrates  the 
Main  SSM  Screen  logic.  Figure  43  illustrates  fuel  monitoring  logic.  Fig¬ 
ure  44  illustrates  the  logic  of  the  Flight  Data  Recorder.  Figure  45 
illustrates  the  logic  governing  internal  system  testing. 


Figure  36.  Subsystem  Status  Monitor  block  diagram 
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Figure  38.  CWP  Display  logic. 
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Figure  41.  Precaution  light  logic. 
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FUEL  QUANTITY/TIME  REMAINING 


Figure  43.  FUEL  LOW  logic. 
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Figure  44.  Flight  Data  Recorder  logic. 


p-fc 

Data  r 

1— * 

RT 

Address 

CDPU 

INDICATOR 

— ^ 

Jest  Date’ 

(Typical) 

-/Mrtss 

Figure  45.  Internal  system  testing  logic. 


70 


TASK  IV:  EVALUATION  OF  DESIGNS 


The  preliminary  designs  developed  during  Task  III  were  submitted 
for  evaluative  review  to  specialists  in  the  areas  of:  flight  safety; 
crew  workload;  aircraft  space,  volume,  and  weight;  reliability  and 
maintainability;  survivability  and  vulnerability;  and  life  cycle  cost 
estimation.  Summaries  of  these  evaluations  follow. 

FLIGHT  SAFETY 

The  following  points  were  highlighted  during  flight  safety  evalua¬ 
tion: 

1.  The  CWP  display  will  greatly  enhance  out-of-cockpit  visual 
attention  during  NOE  flight. 

2.  If  collimation  of  the  CWP  display  could  be  achieved, the  resulting 
removal  of  the  requirement  to  refocus  night  vision  goggles  would  enhance 
flight  safety,  especially  during  NOE  flight. 

3.  The  capability  of  performing  sensor  failure  analysis  in  advance 
of  message  display  is  likely  to  considerably  enhance  flight  safety  by 
reducing  the  frequency  of  falsely  aborted  missions. 

4.  The  greatest  advantages  of  the  SSM  appear  during  workload 
extremes.  Under  high  workload  flight  conditions,  in-cockpit  eye  time 
is  reduced;  under  low  workload  conditions,  peripheral  functions  may 
be  utilized. 

5.  Though  performed  independently,  evaluations  of  reliability, 
maintainability,  and  survivability/ vulnerability  will  impact  flight 
safety  considerations. 

6.  Finalized  flight  safety  evaluation  would  benefit  from  experimental 
and  in-flight  evaluations  of  human  performance.  Human  reliability 
testing  of  any  eventual  hardware  is  recommended. 

7.  Efficient  training  and  relearning  techniques  will  be  an  essential 
feature  contributing  to  flight  safety  when  an  SSM  is  eventually  put  to 
applied  use. 

CREW  WORKLOAD 

A  thorough  workload  analysis  would  require  experimental  investigation 
involving  functional  hardware,  with  provisions  for  measuring  secondary 
task  performance,  physiological  indices  of  stress  and  fatigue,  and 
subjective  evaluations  of  users.  In  the  absence  of  hardware,  the  current 
workload  analysis  was  rudimentary  and  limited  to  reexamination  of  task 
analyses  and  to  evaluation  of  design  features  by  comparison  with  workload 
reduction  guidelines  typically  applied  to  evaluation  of  displays  and 
display  controls. 

Task  sequences  for  subsystem  monitoring  during  a  #1  ENGINE  OIL 
PRESSURE  LOW  condition  were  compared  for  existing  and  SSM  configurations. 
Under  existing  configurations,  a  crew  member  would  be  required  to 
perform  the  following  tasks : 

1.  Note  caution  light. 

2.  Press  to  reset. 
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3.  Scan  caution/ advisory  panel. 

4.  Identify  condition. 

5.  Scan  instruments. 

6.  Interpret  #1  ENG  OIL  PSI  value. 

7.  Intermittent  repetition:  Bteps  3,4, 5,6. 

For  the  same  condition  under  the  SSM  configuration,  the  crew  member 
would  be  required  to: 

1.  Note  caution  light. 

2.  Read  CUP  screen. 

3.  Press  to  reset. 

4.  Intermittent  repetition:  step  2. 

The  SSM  sequence  ia  shorter  than  the  existing  sequence  and  improves 
by  comparison  over  time,  and  steps  7  (existing)  and  4  (SSM),  which 
entail  intermittent  monitoring,  are  repeated.  The  comparison  also  improves 
in  proportion  to  the  amount  of  other  required  workload. 

The  UH-60A  Operational  Sequence  Diagrams  (OSD's)  were  reviewed  and 
the  number  of  different  tasks  performed  by  pilot  and  by  copilot  during 
each  minute  of  a  representative  flight  profile  were  tabulated.  The  OSD's 
listed  subsystem  monitoring  as  a  discrete  task,  and  it  was  counted  as 
such  in  the  tabulation.  Minute-by-minute  tabulation  was  reviewed  and 
subsystem  monitoring  tasks  were  deleted,  according  to  the  following 
rationale:  the  existing  system  requires  intermittent  monitoring  of 
instruments  to  determine  whether  parameters  are  approaching  limits; 
the  SSM  does  not,  and  the  task  may  therefore  be  deleted.  Figure  46 
compares  the  number  of  tasks  performed  by  pilot  and  copilot  under 
existing  and  under  SSM  configurations  for  each  minute  of  a  three-leg 
flight  profile  that  includes  flight  to  pickup  zone,  flight  to  landing 
zone  (including  NOE),  and  return  to  base. 

Figure  47  presents  Figure  46  data  as  percentage  of  tasks  reduced 
through  employment  of  the  SSM  design.  It  will  be  noticed  that  every 
minute  of  the  flight  profile  entails  workload  reduction  by  this  analysis, 
and  that  at  several  points  the  copilot  workload  is  reduced  by  100X. 

Table  41  in  Appendix  A  lists  salient  features  of  the  SSM  which 
promise  to  reduce  crew  workload  during  the  monitoring  of  helicopter 
subsystems.  The  matrix  compares  SSM  features  with  workload  elements. 

This  analysis  is  conceptual,  and  each  cell  of  the  matrix  is  susceptible 
to  further  experimental  analysis.  The  future  conduct  of  such  experimental 
evaluations  is  highly  recommended  during  the  development  of  any  hardware 
for  eventual  applications. 

SPACE,  VOLUME.  AND  WEIGHT 

The  following  points  were  highlighted  during  space  and  volume 
evaluations : 

1.  The  replacement  of  current  dedicated  displays  (dials,  gages,  and 
caution/advisory  panel)  by  the  multi-function  SSM  displays  will  result  in 
a  saving  of  instrument  panel  space. 

2.  The  FDEP,  VWS,  and  VRS  will  result  in  increased  volume  requirements 
within  the  cockpit. 

3.  The  CDPU's,  FDR,  and  RT's  are  likely  to  require  additional  volume, 


Figure  46.  Flight  profile  comparison  of  existing  (standard)  vs. 

SSM  configuration  workload.  Comparisons  are  based 
upon  data  from  the  UH-60A  Operational  Sequence  Diagrams 


Chough  this  will  be  offset  to  the  extent  that  computer  technology 
succeeds  in  achieving  further  miniaturization. 

4.  Designs  including  multiplexed  data  transmission  will  result  in 
reduced  wiring. 

5.  Center  of  gravity  considerations  will  be  Important  when  designing 
for  installment  of  any  eventual  hardware. 

An  estimate  of  the  weight  of  each  unit  of  each  preliminary  design 
was  made.  The  weight  of  each  existing  unit  in  each  helicopter  that  would 
be  replaced  by  the  SSM  units  was  also  estimated.  Insofar  as  the  CDPU's 
are  not  likely  to  be  restricted  to  SSM  usage,  their  weights  were  not 
included  in  the  evaluation.  Estimated  weights  of  units  replaced  were 
subtracted  from  estimated  weights  of  SSM  units  to  be  installed  for 
each  helicopter  and  for  each  preliminary  design.  The  resulting  delta 
estimates  are  presented  in  Table  42  in  Appendix  A. 

Table  42  suggests  that  the  weight  analysis  proves  more  favorable  for 
the  aircraft  that  currently  include  the  greatest  amount  of  instrumenta¬ 
tion  and  wiring  (UH-60A  and  CH-47C)  and  less  favorable  for  the  aircraft 
with  less  instrumentation  and  wiring  (OH-58C  and  AH-1G).  It  should  be 
noted  that  the  weight  estimates  for  SSM  displays  and  RT's  were  conserva¬ 
tively  based  upon  assumption  of  CRT's  for  the  SSM  main  display  and  current¬ 
ly  available  RT  technology.  It  may  be  fair  to  assume  that  technological 
development  will  provide  either  CRT's  of  reduced  weight  or  feasible  flat 
panel  displays,  and  greatly  reduced  RT  weights  in  the  future.  In  this 
case,  it  may  be  predicted  that  the  SSM  will  result  in  weight  savings  for 
both  the  UH-60A  and  the  CH-47C  for  near-term  and  long-term  designs.  It 
should  also  be  noted  that  the  sharing  of  data  transmission  busses  and/or 
displays  by  the  SSM  and  other  systems  will  result  in  reduced  overall 
aircraft  weight. 

RELIABILITY  AND  MAINTAINABILITY 

The  following  points  were  highlighted  during  reliability  and  main¬ 
tainability  evaluations: 

1.  The  SSM  designs  result  in  fewer  system  components,  a  factor 
contributing  to  enhanced  reliability. 

2.  The  SSM  designs  involve  considerable  component  derating,  a 
factor  contributing  to  enhanced  reliability. 

3.  Component  reliability  is  subject  to  change  as  near-term  and 
long-term  technology  is  developed.  Given  the  factors  of  reduced  number 

of  system  components  and  component  derating,  where  SSM  component  reliabil¬ 
ity  matches  existing  component  reliability,  overall  reliability  will  be 
improved. 

4.  Extensive  BIT  capability  will  improve  maintainability. 

5.  Modular  construction  will  Improve  maintainability. 

6.  The  data  storage  and  analysis  and  growth  capability  of  the  FDR 
will  result  in  improved  maintainability. 

7.  The  SSM  is  likely  to  permit  standardization  of  parts  across  heli¬ 
copter  fleets.  This  parts  standardization  will  greatly  enhance  maintain¬ 
ability. 
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SURVIVABILITY/VULNERABILITY 

The  following  points  were  highlighted  during  the  survivability/vulner- 
ability  evaluation: 

1.  The  redundancy  of  CDPU's  and  displays  satisfies  survivability 
requirements.  *or  designs  employing  RT's,  it  is  recommended  that  sensor 
inputs  be  conveyed  to  more  than  one  RT  per  sensor. 

2.  The  long-term  design  employing  fiber-optics  data  transmission 
will  result  in  significantly  improved  tolerance  to  both  weaponry  and 
electromagnetic  interference. 

3.  Unit  locations  and  shielding  will  have  to  be  considered  when  any 
SSM  is  installed. 

LIFE  CYCLE  COSTS 

Life  cycle  cost  estimates  were  made  for  the  UH-60A.  Investment 
costs  (development,  production,  and  initial  spares)  and  operating  and 
support  costs  (fuel,  preventive  maintenance,  unscheduled  maintenance, 
and  replenishment  spares)  were  estimated  and  totaled  for  the  existing 
design  and  for  the  near-term  and  long-term  SSM  designs.  Totals  for 
existing  design  were  subtracted  from  totals  for  the  SSM  designs,  yielding 
delta  estimates.  The  resulting  delta  estimates  for  the  UH-60A  are  pre¬ 
sented  in  Table  43  in  Appendix  A,  which  assumes  a  fleet  of  approximately 
1100  helicopters,  and  constant  1979  dollars.  Estimates  do  not  Include 
the  CDPU's,  since  it  was  assumed  that  the  CDPU's  will  not  be  restricted 
to  the  SSM  system. 

Life  cycle  cost  estimates  must  be  qualified  by  the  following  consid¬ 
erations  : 

1.  All  life  cycle  cost  estimates  are  necessarily  rough,  in  the 
absence  of  well-defined  hardware. 

2.  Operating  and  support  costs  were  not  driving  factors  in  the 
results  yielded.  Rather,  production  and  installation  costs  were  the 
predicted  driving  factors.  These  production  and  installation  estimates 
were  based  upon  conservative  expectations,  and  it  must  be  hypothesized 
that  actual  production  and  installation  costs  will  be  lower  than  estima¬ 
ted. 

3.  Since  production  and  installation  costs  are  the  predicted  driving 
factors,  any  standardization  of  units  across  fleets  of  different  types 

of  helicopters  will  result  in  considerable  reduction  of  life  cycle 
costs,  a  factor  not  input  into  the  current  evaluation. 

4.  In  the  absence  of  experimental  data,  no  attempt  was  made  to 
Include  improvements  in  mission  effectiveness  achievable  through  the 
SSM  in  the  current  analysis  of  life  cycle  costs.  A  thorough  treatment 
of  the  life  cycle  costs  presented  must  include  consideration  of  any 
improvements  in  mission  effectiveness  achieved  through  workload  reduction, 
inclusion  of  peripheral  functions,  and  potential  contribution  to  an 
integrated  advanced  cockpit. 

5.  It  is  predicted  that  weight  and  complexity  factors  will  favor  the 
UH-60A  and  the  CH-47C  to  a  greater  extent  than  the  OH-58C  and  the  AH-1G, 
and  life  cycle  cost  estimates  are  likely  to  prove  more  favorable  for  the 
UH-60A  and  CH-47C  than  for  the  OH-58C  or  AH-1G. 
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SUMMARY  OF  ADVANTAGES  AND  DISADVANTAGES 

The  following  major  advantages  of  the  SSM  were  identified  during 
the  evaluations  of  the  SSM  designs:  crew  workload  reduction;  flight 
safety  enhancement;  reduction  in  instrument  panel  space  requirements; 
improved  reliability  and  maintainability  through  component  derating, 
use  of  fewer  components,  sensor  failure  analysis,  internal  system  testing, 
flight  data  recording,  and  standardization  of  parts  across  fleets;  sim¬ 
plified  reconfiguration;  addition  of  peripheral  functions;  growth  capa¬ 
city;  and  potential  integration  with  other  display  and  control  systems. 

Both  life  cycle  cost  and  weight  estimates  were  made  upon  conserva¬ 
tive  expectations  of  near-term  and  long-term  technological  progress. 

Based  upon  these  conservative  expectations,  both  life  cycle  cost  and 
weight  deltas  were  generally  positive,  but  favored  the  UH-60A  and  CH-47C 
over  the  AH-1G  and  OH-58C.  Before  categorizing  the  life  cycle  cost  and 
weight  factors  as  disadvantages,  the  qualifications  attached  to  these 
evaluations  and  presented  in  the  discussions  above  should  be  considered. 
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TASK  V:  IDENTIFICATION  OF  PERIPHERAL  FUNCTIONS 


During  Task  V  peripheral  functions  which  might  be  performed  by 
the  SSM  were  identified,  a  Flight  Data  Entry  Panel  (FDEP)  for  data  input 
and  display  access  of  peripheral  functions  was  designed,  and  formats 
for  the  display  of  peripheral  information  were  defined. 

Figure  48  illustrates  the  Flight  Data  Entry  Panel  designed.  Approxi¬ 
mating  a  hand-held  calculator  in  dimensions,  the  FDEP  is  designed  as  a 
stowable  keyboard  for  the  input  of  performance  data  and  the  access  of 
peripheral  function  displays,  which  will  appear  on  the  SSM  main  display. 

The  FDEP  operates  either  independently  of  the  main  SSM  display  for  pre¬ 
flight  calculations  in  the  briefing  room,  or  in  conjunction  with  the 
main  SSM  display  through  an  umbilical  cord  in  the  aircraft.  When  acting 
independently  of  the  main  system,  the  FDEP  is  self-powered  and  program¬ 
mable  for  Technical  Manual  calculations.  When  connected  to  the  main  sys¬ 
tem,  the  stored  calculations  and  data  in  the  CDPU's  are  updated  by  the 
programmed  FDEP  inputs.  Operation  of  the  keyboard  during  flight  will  be 
described  in  connection  with  associated  peripheral  displays. 

The  top  row  of  keyboard  buttons  are  used  to  access  checklists  which 
are  displayed  on  the  main  SSM  screen.  Depression  of  the  CKPT  CHECK  button 
calls  up  the  display  of  a  cockpit  checklist  illustrated  in  Figure  49. 
Depression  of  the  APU  START  button  calls  up  the  APU  start  checklist 
illustrated  in  Figure  50.  Depression  of  the  ENG  START  button  calls  up  the 
Engine  Start  checklist  illustrated  in  Figure  51.  The  Before  Takeoff 
checklist  illustrated  in  Figure  52  is  an  appendix  to  the  Engine  Start 
checklist  and  automatically  appears  at  the  end  of  the  Engine  Start 
checklist.  Depression  of  the  HIT  CHECK  button  calls  up  the  Hit  Check 
display  illustrated  in  Figure  53.  The  Hit  Check  display  combines  command 
statements  (e.g.,  "Establish  60%  Torque")  with  TGT  status  indications 
derived  from  comparison  of  TGT  sensor  Inputs  against  stored  limits.  Taken 
together,  the  checklist  buttons  and  displays  replace  the  analogous 
portions  of  the  Technical  and  Flight  Operator's  manuals. 

The  second  row  of  buttons  on  the  FDEP  accesses  performance  calculation 
displays  on  the  SSM  main  screen.  All  performance  calculation  displays 
require  data  input  through  the  FDEP.  Display  formats  distinguish  between 
input  data  and  resulting  information  by  the  size  of  letters  and  by  an 
input  prompt.  In  the  case  of  the  Takeoff  performance  calculation,  whose 
display  is  illustrated  in  Figure  54  and  accessed  by  depression  of  the 
TAKEOFF  button,  Pressure  Altitude,  FAT,  and  Gross  Weight  require  data 
Inputs.  Each  would  be  succeeded  by  a  prompt  character  on  the  screen  until 
data  is  input.  Crew  members  may  base  performance  calculations  upon  either 
currently  sensed  or  predicted  variables.  If  the  crew  member  desires  to 
input  data  which  is  currently  sensed  or  which  has  been  previously  stored, 
he  may  do  so  by  simply  depressing  the  CURR  button.  If,  for  example,  the 
crew  member  wished  to  input  "current  pressure  altitude"  as  a  basis  for 
performance  calculation,  and  the  current  pressure  altitude  were  2000  ft., 
then  a  depression  of  the  CURR  button  would  result  in  an  input  of  2000  ft. 
for  pressure  altitude  and  a  display  of  2000  ft.  pressure  altitude.  If 
the  crew  member  desires  to  input  data  which  is  not  currently  sensed  or 
previously  stored,  he  would  respond  to  the  input  prompt  by  depressing 
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Figure  48.  Stowable  Flight  Data  Entry  Panel. 


8 


COCKPIT  CHECK 


1.  BATTERY  SWITCH  -  ON 

2.  COCKPIT  UTILITY  LIGHTS  -  ON 

3.  SEAT  BELTS  AND  SHOULDER  HARNESS  -  FASTEN 

4.  SHOULDER  HARNESS  LOCKS  -  CHECK  MANUAL  AND  AUTO  LOCKS 

5.  SEATS  AND  PEDALS  -  ADJUST 

6.  COPILOT'S  COLLECTIVE  -  EXTENDED  AND  LOCKED 

7.  COCKPIT  DOORS  -  CLOSED  AND  LATCHED 

8.  EMERGENCY  DOOR  RELEASES  -  D  RINGS  SET 

9.  PARKING  BRAKES  -  RELEASE,  THEN  SET 

10.  RADIOS  -  ALL  OFF 

11.  CIRCUIT  BREAKERS  -  ALL  SET 

12.  BACKUP  HYDRAULIC  PL7.P  SWITCH  -  AUTO 

13.  HYDRAULIC  LEAK  ISOLATION  TEST  SWITCH  -  NORN 

14.  CARGO  HOOK  SWITCH  -  SAFE 

15.  APU  START  SWITCH  -  OFF 
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Figure  49.  Cockpit  Check  display. 
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Vf. 


APU  START 


APU  SWITCH  -  START  POSITION/  THEN  RUN 
APU  GEN  -  ON 
BACKUP  PUMP  -  ON 
NAVIGATION  LIGHTS  -  ON 
INSTRUMENT  SECONDARY  LIGHTS  -  AS  DESIRED 
COCKPIT  FLOOD  LIGHTS  -  AS  DESIRED 
CAS IN  DOME  LIGHTS  -  AS  DESIRED 
HEATER  SWITCH  -  AS  DESIRED 

vent  Slower  switch  -  as  desired 

HEATER  CONTROL  KNOB  -  AS  DESIRED 

SERVO  OFF  SWITCH  -  1ST  STAGE  POSITION 

HOVE  CONTROLS  SLOWLY  THROUGH  RANGE  -  CHECK  FOR  RESTRICTIONS 

SERVO  OFF  SWITCH  -  2ND  STAGE  POSITION 

HOVE  CONTROLS  SLOWLY  THROUGH  RANGE  -  CHECK  FOR  RESTRICTIONS 

SERVO  OFF  SWITCH  -  CENTER  (ON)  POSITION 
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Figure  50.  APU  Start  display. 
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1.  FIRE  GUARD  -  POSTED,  ROTOR  DISC  AREA  CLEAR 

2.  CYCLIC  -  CENTERED 

3.  COLLECTIVE  -  DOWN 

A.  GUST  LOCK  *  DISENGAGED 

5.  FUEL  SELECTORS  -  XFD 

6.  POWER  CONTROL  LEVERS  -  OFF 
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Figure  51.  Engine  Start  display. 
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100  100 100  100  100  102  Ite  750  ?50  £0  £0  S)  55 

BEFORE  TAKEOFF  CHECK 


1.  COLLECTIVE  FRICTION  -  SET 

2.  COPILOT'S  COLLECTIVE  LEVER  -  EXTENDED 

3.  POWER  CONTROL  LEVER  -  FLY  (NR  -  98Z) 

R.  FLIGHT  CONTROLS  -  CHECK  FOR  FREEDOM  OF  MOVEMENT 
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Figure  52.  Before  Takeoff  Check  display 


#1  ENGINE 

1.  #1  ENGINE  -  ESTABLISH  60Z  TORQUE 

2.  #2  ENGINE  -  ESTABLISH  GROUND  IDLE 

•••  HI  TGT  WITHIN  LIMITS 
a  ENGINE 

1.  #2  ENGINE  -  ESTA3LISH  60Z  TORQUE 

2.  #1  ENGINE  -  ESTABLISH  GROUND  IDLE 

—  «  TGT  WITHIN  LIMITS 
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Figure  53.  Hit  Check  display 
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Figure  54.  Takeoff  performance  calculations 


the  appropriate  digit  buttons.  When  the  input  is  correct  and  complete, 
depression  of  the  ENTER  button  enters  the  input  data.  Depression  of 
the  CLEAR  ENTRY  button  erases  from  memory  and  display  the  last  digit 
appearing  on  the  display.  In  the  case  of  the  Takeoff  display  Illustrated 
in  Figure  54,  the  items  from  Max  Gross  Weight  through  Max  Torque  Available 
have  been  automatically  calculated  on  the  basis  of  the  data  input  and 
the  performance  calculation  information  and  algorithms  stored  in  memory. 
Depression  of  the  CLIMB  button  calls  up  the  Climb  display  illustrated 
in  Figure  55.  Depression  of  the  HOVER  button  calls  up  the  Hover  display 
illustrated  in  Figure  56.  Depression  of  the  CRUISE  button  calls  up  the 
Cruise  display  illustrated  in  Figure  57.  Taken  together,  the  performance 
calculation  displays  and  inputs  replace  the  performance  calculation 
workload  currently  required  in  referencing  the  analogous  portions  of  the 
Flight  Operator's  Manuals.  It  is  believed  that  the  flight  phase  and 
CURR  input  features  of  the  FDEP  represent  novel  contributions  to  the 
state  of  the  art  of  performance  calculation  panels. 

Depression  of  the  C.G.  button  calls  up  the  CG  display  illustrated 
in  Figure  58.  The  CG  display  provides  a  qualitative  Indication  of  the 
relation  between  current  center  of  gravity  and  forward  and  aft  limits,  as 
well  as  digital  readouts  of  current  CG,  forward  limit,  and  aft  limit. 

Depression  of  the  LOAD  button  calls  up  the  Hook  Load  display  illus¬ 
trated  in  Figure  59.  The  Hook  Load  display  provides  a  qualitative  indi¬ 
cation  of  the  hook  loads  for  two  cargo  hooks  (FWD  and  AFT)  by  reference 
to  limits,  and  a  digital  readout  of  load  in  pounds  for  each  hook. 

Depression  of  the  FUEL  PREC  button  calls  up  a  display  of  the 
current  setting  of  the  fuel  precaution  limit*  The  limit  may  be  reset  by 
depression  of  the  digital  keys,  followed  by  depression  of  the  ENTER 
button.  The  fuel  precaution  limit  may  be  set  higher  or  lower  than  the 
caution  limit.  As  illustrated  in  the  fuel  logic  diagram  in  Figure  43, 
when  the  precaution  limit  has  been  set  higher  than  the  caution  limit 
a  precaution  condition  will  trigger  the  precaution  light,  and  when  the 
precaution  limit  has  been  set  lower  than  the  caution  limit  a  precaution 
condition  will  trigger  the  caution  light. 

When  the  FDEP  is  in  use  and  the  SSM  main  screen  indicates  that 
information  to  be  displayed  exceeds  screen  capacity,  paging  may  be 
accomplished  by  depression  of  the  PAGE  button  on  the  FDEP. 

FDEP  accessed  displays  will  automatically  be  relegated  to  a  priority 
lower  than  that  of  caution,  warning,  precaution  or  adivsory  information 
and  lower  than  the  displays  accessed  by  depression  of  the  system  buttons 
associated  with  the  SSM  main  screen.  The  REC  button  activates  the  FDR.  A 
second  depression  of  the  button  deactivates  the  recorder  unless  an  auto¬ 
matic  actuation  of  the  FDR  has  been  commanded  by  the  CDPU's. 

ACCESS  OF  EMERGENCY  PROCEDURES 

Interviews  with  instructor  pilots  at  Ft.  Rucker,  Alabama,  confirmed 
the  desirability  of  providing  optional  access  to  display  of  emergency 
procedures.  While  pilots  insisted  that  emergency  procedures  should  not 
be  displayed  automatically  in  conjunction  with  caution  or  warning  mes¬ 
sages  since  this  would  impose  additional  workload  when  displays  were 
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Figure  55.  Climb  performance  calculations. 
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Figure  56.  Hover  performance  calculations 
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Figure  57.  Cruise  performance  calculations. 
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Figure  58.  Center  of  Gravity  display. 
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unnecessary,  they  did  recommend  ready  access  to  any  display  controls  for 
manual  callup  of  emergency  procedures.  On  this  account,  emergency  pro¬ 
cedures  display  access  was  not  included  in  the  FDEP,  but  was  instead 
designed  into  the  button  row  associated  directly  with  the  SSM  main 
display.  Figure  60  illustrates  a  sample  Emergency  Procedures  display, 
accessed  by  depression  of  the  EMER  PROCED  button.  At  any  given  moment, 
there  are  two  subsets  of  emergency  procedures :  those  associated  with 
parameters  currently  out  of  tolerance,  and  those  associated  with  para¬ 
meters  that  are  not  currently  out  of  tolerance.  Crew  members  are  more 
likely  to  desire  access  to  emergency  procedures  associated  with  parameters 
which  are  out  of  tolerance.  A  single  depression  of  the  EMER  PROCED  button 
accesses  automatically  the  emergency  procedures  associated  with  parameters 
currently  out  of  tolerance.  These  parameters  are  prioritized,  and  the 
associated  emergency  procedures  are  displayed  in  prioritized  fashion, 
until  screen  capacity  is  exceeded.  Where  paging  is  required,  it  is  accom¬ 
plished  by  depression  of  the  PAGE  button.  A  second  depression  of  the 
EMER  PROCED  button  clears  the  display  of  emergency  procedures.  Depression 
of  a  system  button  (FUEL,  ENG,  etc.,)  immediately  following  depression 
of  the  EMER  PROCED  button  will  erase  display  of  emergency  procedures 
associated  with  out-of-tolerance  parameters  and  switch  mode  to  display 
emergency  procedures  for  all  parameters  associated  with  the  accessed 
system,  in  order  of  parameter  priority.  Where  required,  paging  is  accom¬ 
plished  by  depression  of  the  PAGE  button.  A  second  depression  of  the 
EMER  PROCED  button  erases  the  display  of  emergency  procedures. 

OTHER  PERIPHERAL  FUNCTIONS 

Several  peripheral  functions  associated  with  aircraft  maintenance 
have  been  discussed  under  the  Preliminary  Designs  section,  including 
flight  data  recording  and  playback.  Though  not  included  in  the  design, 
the  following  possibilities  for  maintenance  peripherals  have  been  iden¬ 
tified  through  interviews  with  maintenance  personnelj  utilization  of  SSM 
displays  and  computer  memory  storage  for  presentation  of  troubleshooting 
trees  onboard  the  aircraft;  storage  of  maintenance  data  onboard  the 
aircraft,  where  it  is  anticipated  that  the  aircraft  will  be  maintained 
in  different  locations  at  different  times  (  while  such  storage  might 
include  time-line  item  replacement  recording,  it  was  not  recommended  that 
the  aircraft  serve  as  the  sole  storage  location  for  maintenance  data); 
and  inclusion  of  provisions  for  integration  of  various  additional  sensors 
with  the  FDR  for  diagnostic  testing. 

The  following  peripheral  applications  to  student  flight  training 
were  identified:  use  of  the  FDR  to  record  student  responses  to  system 
events,  and  use  of  the  CDPU's  to  program  ground-based  simulation  exer¬ 
cises.  In  tandem  aircraft,  the  SSM  might  be  especially  useful  for  instruc¬ 
tor  monitoring  of  student  responses  to  system  events  through  the  SSM 
main  screen  and  use  of  the  main  screen  for  student  monitoring  of  instruc¬ 
tor-provided  prompts.  It  is  anticipated  that  recording  of  student  responses 
to  system  events  will  require  additional  sensors  as  well  the  use  of  the 
SSM  display  for  instructor  monitoring  of  student  responses.  It  is  also 
anticipated  that  allowing  for  instructor  prompts,  displayed  to  the  student 
through  the  SSM  main  screen,  will  require  an  additional  keyboard  or  console. 
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EMERGENCY  PROCEDURES:  DUAL  CONVERTER  FAILURE 
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Figure  60.  Emergency  Procedures  display. 


In  all  cases  the  potential  use  of  the  SSM  for  training  of  student 
pilots  highlights  the  flexibility  inherent  in  the  SSM  design.  This  flexi¬ 
bility  of  programming  feature  will  in  general  facilitate  the  following: 
inclusion  of  additional  system  models  for  improved  sensor  failure  analysis 
and  diagnostics,  as  they  become  available;  inclusion  of  additional  sensors 
as  they  become  available,  with  allowances  for  easy  reprioritization;  altera¬ 
tion  of  emergency  procedures,  checklists,  and  performance  calculation 
data  bases  and  algorithms;  redefinition  of  precaution,  caution,  and 
warning  limits;  inclusion  of  automated  responses  as  they  become  available; 
reconfiguration  of  helicopters  for  different  missions;  and  integration 
of  the  Subsystem  Status  Monitor  with  other  systems  under  development 
within  the  framework  of  the  Army's  extensive  efforts  to  design,  test, 
and  construct  a  reduced  workload  and  more  mission-effective  helicopter 
cockpit. 


CONCLUSIONS  AMD  RECOMMENDATIONS 

The  following  general  conclusions  may  be  drawn  from  the  foregoing 
report : 

1.  The  display -by-exception  philosophy  currently  governing  the 
display  of  many  subsystem  parameters  displayed  via  caution/waming 
panels  in  helicopters  can  be  viably  extended  to  include  other  subsystem 
parameters  currently  displayed  via  dedicated  instruments.  Exceptions 

to  this  rule  are  main  rotor  speed,  which  should  be  continually  displayed, 
and  power  management  parameters,  which  should  be  combined  into  a  single 
power  management  analog  indicator. 

2.  A  separate  logic  governing  the  display  of  parameters  under 
differing  mission  phases  or  environmental  conditions  is  not  required. 

3.  The  advanced  Subsystem  Status  Monitor  (SSM)  defined  in  the 
foregoing  report  will  reduce  crew  workload,  improve  mission  effectiveness, 
enhance  reliability,  maintainability,  and  survivability/vulnerability, 
permit  standardization  of  parts  across  helicopter  fleets,  and  accommodate 
subsystem  growth  and  increasing  complexity. 

4.  The  impact  of  the  SSM  designs  discussed  upon  life  cycle  costs 
and  aircraft  weight  will  be  more  favorable  for  aircraft  of  large  weight 
and  complexity  in  their  subsystems. 

The  following  general  recommendations  may  be  drawn  from  the  foregoing 
report : 

1.  The  display  logic  and  formats  discussed  should  be  submitted  to 
experimental  evaluation  to  determine  quantitatively  their  impact  upon 
human  performance  and  reliability  before  incorporation  into  any  hardware 
applications  based  upon  the  designs  presented. 

2.  While  voice  synthesis  and  recognition  appear  to  represent  long¬ 
term  solutions  to  the  problem  of  information  input/ output  under  NOE 
helicopter  flight  conditions  requiring  constant  manual  control  of 

the  helicopter  and  visual  attention  to  the  outside  world,  the  topic 
of  computerized  voice  interaction  should  be  studied  carefully  to 
determine  the  most  effective  applications  of  this  emerging  technology. 

3.  Any  hardware  development  of  the  SSM  designs  presented  should 
be  complemented  by  a  repetition  of  reliability,  maintainability, 
survivability/ vulnerability ,  aircraft  weight,  life  cycle  costs,  safety, 
and  human  workload/ reliability  evaluations. 

^*e  interaction  of  the  SSM  with  other  designs  aimed  at  cockpit 
integration  should  be  studied. 
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APPENDIX  A:  TABLES  1-43 


Tables  1-8  summarize  subsystem  parameters  obtained  from  the  UH-60A,  CH-47C, 
0H-58C,  and  AH-1G  operator's  manuals.  Tables  9-12  summarize  cross-compar¬ 
isons  of  UH-60A,  CH-47C,  and  AH-1G  parameters.  Tables  13-16  present  the 
results  of  an  information  requirements  analysis.  Tables  17-20  constitute 
the  preliminary  formatting  of  an  information  requirements  questionnaire 
that  was  later  submitted  to  Army  pilots.  Tables  21-24  present  composite 
responses  to  the  pilot  questionnaire.  Table  25  presents  a  cross-comparison 
of  parameters  by  subsystem.  Table  26  lists  the  major  signal  source  devices 
used  in  the  four  helicopters  studied.  Tables  27-30  summarize  the  display 
logic  for  each  helicopter.  Tables  31-34  present  data  on  automatic  displays 
and  multiple  accessing.  Tables  35-38  present  prioritized  listings  of  items 
of  information  for  each  helicopter.  Table  39  shows  the  relationship  of 
parameter  groups.  Table  40  compares  the  properties  of  data  transmission 
cables.  Tables  41  and  42  evaluate  workload  reduction  and  weight  savings 
attributable  to  the  SSM.  Table  43  presents  SSM  life  cycle  cost  estimates 
for  the  UH-60A. 
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TABLE  3.  CH-47C  PARAMETERS  DISPLAYED  VIA  ANALOG  INSTRUMENTS 
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TABLE  8.  AH-1G  PARAMETERS  DISPLAYED  VIA  WARNING/ CAUTION  LIGHTS 
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TABLE  9.  PARAMETERS  DISPLAYED  IN  FOUR  HELICOPTERS 


Parameter 


Indicator  * 


Fuel  Quantity 
Engine  Oil  Temperature 
Engine  Oil  Pressure 


Ufa  Oil  Pressure 
Nd 

%  Torque 

Fuel  Low 

Engine  Chip 

XMSN  Oil  Pressure  Low 

XMSN  Oil  Temperature  High 

Chip  Main  XMSN 

Generator  Output  Low 

Master  Caution 


I 

I 

I 

I 

I 

I 

I 

C 

C 

c/w 

c/w 

c 

c 

M 


*  Is  analog  instruments;  C:  caution  light; 

W:  warning  light;  M:  master  caution  light. 


TABLE  10.  PARAMETERS  DISPLAYED  IN  THREE  HELICOPTERS 


Parameter 

Indicator  * 

Exception 

DC  Load  Meter 

I 

UH-60A 

IFF  Incoperative 

c 

CH-47C 

PRI  Servo  Press 

C 

CH-47C 

Fuel  Filter  Bypass 

C 

CH-47C 

Oil  Filter  Bypass 

C 

CH-47C 

cRip  Tail  XMSN 

I 

CH-47C 

C 

CH-47C  ■ 

Low  Rotor  RPM 

W/T 

CH-47C 

Fuel  Press  Low 

C 

0H-58C 

XMSN  Oil  Pump 

I 

0H-58C 

*  I:  analog  Instruments 

;  C:  caution  light 

W:  warning  light;  T: 

audio  tone 

TABLE  11.  PARAMETERS  DISPLAYED  IN  TWO  HELICOPTERS 


Parameter 

Indicator  * 

Helicopters  Displaying  Parameter 

Engine  Fire 

W/C 

UH-60A 

CH-47C 

Boost  Servo  Press  Low 

C 

UH-60A 

CH-47C 

Ext  PWR  Connected 

A/C 

UH-60A 

CH-47C 

SAS  Off 

C 

UH-60A 

CH-47C 

Cargo  Hook  Open 

A/C 

UH-60A 

CH-47C 

Parking  Brake  On 

A/C 

UH-60A 

CH-47C 

API)  Overspeed 

C 

UH-60A 

CH-47C 

APU  Exhaust  Pump  Hi 

C 

UH-60A 

CH-47C 

APU  Oil  Press  Low 

c 

UH-60A 

CH-47C 

Eng  Oil  Press  Low 

c 

IJH-60A 

AH-1G 

Chip  Int  XMSN 

c 

UH-60A 

AH-1G 

Rotor  Over speed 

c 

UH-60A 

AH-1G 

Engine  Out 

w 

UH-6QA 

QH-58C 

Fuel  Boost  Press  Low 

c 

0H-58C 

AH-1G 

AC  Inv  Output  Low 

c 

0H-58C 

AH-1G 

*  W;  warning  light;  C 

:  caution  light;  A: 

advisory  light. 

TABLE  12.  PARAMETERS  DISPLAYED  IN  ONE  HELICOPTER 


Parameter  Indicator  *  Helicopter  Displaying  Parameter 

Prime  Boost  Bump  On  A  UH-60A 

Eng  Oil  Temp  Hi  C  UH-60A 


Hyd.  Pump  Press  C  UH-60A 
Pri  Servo  Jam  C  UH-60A 
Boost  Servo  Jam  C  UH-60A 
T/R  Servo  Press  C  UH-60A 
Backup  Pump  On  A  UH-60A 
APU  Fire  U  UH-60A 
Stabilator  Pos  I  UH-60A 
APU  Underspeed  C  UH-60A 
APU  Sequence  Fail  C  UH-60A 
APU  GEN  On  A  UH-60A 
APU  On  A  UH-60A 
Converter  Output  Low  C  UH-6QA 
Batt  Low  Charge  C  UH-60A 
Batt  Fault  C  UH-60A 
AC  ESS  Bus  Off  C  UH-60A 
DC  ESS  Bus  Off  C  UH-60A 
Fit  Path  Stab  Fail  C  UH-60A 
Stab  Auto  In  OP  C/T  UH-60A 
Pitch  Bias  Fail  C  UH-60A 
Gust  Lock  Not  Disengaged  C  UH-60A 
Anti -Ice  On  A  UH-60A 
Pitot  Heat  On  A  UH-60A 
Cargo  Hook  Armed  A  UH-60A 
Eng  Start  Valve  Open  C  UH-60A 
Fuel  Pressure  1  AH-1G 
Inlet  Air  Press  Neg  C  AH-1G 
Eng  Oil  Quantity  Low  C  CH-47C 
N-j  Control  Loop  Energized  C  CH-47C 
Fit  Ctrl  Hyd  Press  I  CH-47C 
Utility  Hyd  Press  I  CH-47C 
Rectifier  Off  C  CH-47C 
AC  Load  Meter  I  CH-47C 
Heater  Hot  C  CH-47C 
Wheel  De-Phased  C  CH-47C 
APU  Tach  I  CH-47C 


I:  analog  Instruments;  Ws  warning  light;  C:  caution  light; 
A:  advisory  light;  Ts  audio  tone. 
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TABLE  14.  CH-47C  INFORMATION  REQUIREMENTS 
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PARAMETER  PRIORITIES  MISSION  PHASE  ENVIRONMENT  OiSPlAV  FORMAT 
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TABLE  19.  OH-58C  BASELINE  INFORMATION  REQUIREMENTS. 


PARAMETER 


PRIORITIES  MISSION  PHASE  ENVIRONMENT  DISPLAY  FORMAT 
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PARAMETER  PRIORITIES  MISSION  PHASE  ENVIRONMENT  D1 SPLAT  FORMAT 
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TABLE  20.  AH-1G  BASELINE  INFORMATION  REQUIREMENTS 
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PRIORITIES  MISSION  PHASE  ENVIRONMENT  DISPLAY  FORMAT 
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PARAMETER  PRIORITIES  MISSION  PHASE  ENVIRONMENT  OISPLAV  FORMAT 
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PARAMETER  PRIORITIES  MISSION  PHASE  ENVIRONMENT  DISPLAY  FORMAT 
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PARAMETER  PRIORITIES  MISSION  PHASE  ENVIRONMENT  DISPLAY  FORMAT 
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Additional  Areas 

Please  answer  the  following  questions: 

Can  you  think  of  any  other  Items  of  subsystem  Information  that  should  be  displayed 
In  future  helicopters? 

Rate  of  change  data  during  limit  approach  or  excedance. 


Which  caution/wamlng  lights  have  you  found  Illuminate  most  frequently? 
How  frequently?  During  what  conditions? 

Chip  Detectors 

FPS/stabl lator  -  due  to  SAS/FPS  computer  problems  shutting  system  down 
Electrical  system 


Are  there  any  cautlon/waming  lights  that  you  have  found  to  be  unreliable? 
Chip  detectors 
Fire  warning 
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TABLE  21.  CONTINUED 


What  aspects  of  subsystem  monitoring  have  you  found  to  be  most  problematic, 
annoying,  or  distracting  during  NOE  flight? 


How  do  you  feel  about  presenting  information  through  voice  warning  systems  or 
through  beeps,  tones,  etc.? 

Mixed  reactions,  from:  "noise  distracting"  to  "love  it". 


Uhat  problems  do  you  see  arising  with  systems  that  require  you  to  push  buttons 
to  obtain  information  about  sob'systems? 


TABLE  22.  CH-47C  PILOT  CONSENSUS 
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TABLE  22.  CONTINUED 


Additional  Art as 

Please  answer  the  following  questions: 

Can  you  think  of  any  other  items  of  subsystem  information  that  should  be  displayed 
in  future  helicopters? 

VNE:  Approaching  or  exceed 

Speed  trim  not  extending/ retracting  with  change  in  airspeed 
Fuel  flow  meters 

Digital  readout  for  weight  on  hook 


Which  caution/waming  lights  have  you  found  illuminate  most  frequently? 
How  frequently?  During  what  conditions? 

Chip  detector  (engine) 

Wheel  dephased 


Are  there  any  caution/warning  lights  that  you  have  found  to  be  unreliable? 
Engine  chip 
XMSN  chip 
Fire  handle 


TABLE  22.  CONTINUED 


What  aspects  of  subsystem  monitoring  have  you  found  to  be  most  problematic, 
annoying,  or  distracting  during  NOE  flight? 

Monitoring  engine  indications  not  backed  up  by  caution  lights 


How  do  you  feel  about  presenting  information  through  voice  warning  systems  or 
through  beeps,  tones,  etc.? 

Excellent,  so  long  as  they  don't  interfere  with  comnuni cat ions,  and  so  long  as  beeps/ 
tones  are  not  confused  with  other  aircraft  sounds. 

Problematic  where  sensors  are  unreliable. 

Should  allow  for  re-set  turnoff. 


What  problems  do  you  see  arising  with  systems  that  require  you  to  push  buttons 
to  obtain  Information  about  subsystems? 

ftecomnend  cyclic/thrust  locations. 
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Additional  Areas 

Please  answer  the  following  questions: 


Can  you  think  of  any  other  items  of  subsystem  information  that  should  be  displayed 
in  future  helicopters? 

1.  A  system  to  inform  the  pilot  where  hits  were  scored  on  his  A/C  while  in  a 
combat  environment.  Damage  report  if  you  will. 

2.  Some  type  of  load  measure  to  inform  the  pilot  of  the  weight  he  is  about  to 
pick  up. 

3.  An  Indication  of  the  presence  of  ice  on  the  blades. 

4.  An  indication  of  a  door  that  is  not  secure. 

5.  A  sequence  light  for  starting  procedure  and  shutdown  procedure,  if  proper 
sequence  is  not  followed  light  comes  on. 

6.  Display  of  the  proper  emergency  procedure  to  accompany  the  caution  light 
or  audio  instructions  to  each  the  pilot  and  copilot  as  to  their  proper 
actions. 

7.  Fuel  management  system 


Which  caution/waming  lights  have  you  found  HI  urinate  most  frequently? 
How  frequently?  During  what  conditions? 

Eng.  Fire  -  The  frequency  depends  on  the  A/C  -  Usually  during  runup 

Chip  Lgt.  -  "  Varied 

Rec.  Lgt.  -  "  Usually  during  runup 


Are  there  any  caution/waming  lights  that  you  have  found  to  be  unreliable? 


Unfortunately,  the  chip  lights  usually  are  unreliable. 


TABLE  23.  CONTINUED 


What  aspects  of  subsystem  monitoring  have  you  found  to  be  most  problematic, 
annoying,  or  distracting  during  NOE  flight? 

I  am  not  qualified  to  respond  as  to  NOE  however  using  similar  techniques 
In  civilian  work  I  found  gauges  In  general  to  be  annoying  and  difficult  to 
read. 


How  do  you  feel  about  presenting  Information  through  voice  warning  systems  or 
through  beeps,  tones,  etc.? 

GREAT — provided.'  audio  systems  should  present  the  information  In  much  the 
same  manner  as  a  copilot  would.  1e.,a  tone  to  Inform  you  a  message  is  coming 
then  a  brief,  concise  description  of  the  problem. 


Hhat  problems  do  you  see  arising  with  systems  that  require  you  to  push  buttons 
to  obtain  Information  about  subsystems? 

Without  a  copilot  to  assist  you  alotl  With  a  copilot  very  little  if  any 
examples:  control  while  hand  and  eye  are  pushing  buttons,  errors  in  pushing 
the  right  buttons. 


TABLE  24.  AH-1G  PILOT  CONSENSUS 
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TABLE  24.  CONTINUED 


K-  HO- 

PMORMIES  MISSION  PHASE  ENVIRONMENT  OISPIAV  FOMWI  PONSC  MU 


AC  load  Meter 


DC  load  Meter 


Engine  Fir* 


Fit  Path  Stab  Sir*  Fall 


Stabllator  Auto  Mode  In  Op  NA 


BibmHB 

iiiiEIiiii 
Siiimmiii 
Ifliiii 
aim 


lllll 

ilim 

nil 


ilim 

liirn 


III  in  n)M‘i *l !»«■ 


iiiiiii  mui  i 


Parking  Brake  On 


TABLE  24.  CONTINUED. 

Additional  Areas 


Please  answer  the  following  questions: 


Can  you  think  of  any  other  Items  of  subsystem  information  that  should  be  disolayed 
in  future  helicopters? 

A/S  below  effective  translational  lift. 

Mast  movement  Indicator  on  rigid  rotors. 


Which  caution/waming  lights  have  you  found  illuminate  most  frequently? 
How  frequently?  During  what  conditions? 


Aux.  Fuel  Low 
RPM  High 
Engine  Chip 

Fire  Warning  Light  (UH-1H) 

Fuel  Boost  Pumps  During  Cruise 
Tall  Rotor  Chip 

DC  Gen.  -  at  lew  RPM  after  autorotation 
Hydraulics  Off 


Are  there  any  caution/waming  lights  that  you  have  found  to  be  unreliable? 

At  times  hydraulic  pressure  warning  will  not  illuminate  for  several  seconds 
after  system  Is  inoperative.  (UH-1) 

20  min.  fuel  light 
Fire  Warning  (UH-1H) 

Hydraulics  Off 
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AD-AQ83  135  UNITED  TECHNOLOGIES  CORP  STRATFORD  CT  SIKORSKY  AIRCR— ETC  F/G  1/3 
ADVANCEO  SUBSYSTEMS  STATUS  MONITOR. (U) 

APR  80  J  MCGEE#  H  HARPER  DAAK51-78»C-0023 


UNCLASSIFIED  SER-510025  USAAVRADC0M-TR-80-D-5  ML 


m 


TABLE  24.  CONTINUED 


What  aspects  of  subsystem  monitoring  have  you  found  to  be  most  problematic, 
annoying,  or  distracting  during  NOE  flight? 

Eng./XHSH  instnments  In  new  A/C. 

I,  l,  tic  marks  difficult  and  tin*  consuming  to  interpret. 

Electrical  system  monitoring 


How  do  you  feel  about  presenting  information  through  voice  warning  Systems  or 
through  beeps,  tones,  etc.? 

Excellent,  especially  as  backup. 

Recommend  visual  backup. 

Washout  problem  possible. 

Recommend  Incorporation  of  procedural  info. 

Recommend  preceding  tone  to  message. 


What  problems  do  you  see  arising  with  systems  that  require  you  to  push  buttons 
to  obtain  information  about  subsystems? 


Possible  confusion 
System  failure? 

Reaction  -  actuation  delay 
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ig  instruments ;  W:  warning  light;  C:  caution  light;  A:  advisory  light 
}  tone  ;  M:  master  caution  light. 
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landing  Gear  Wheel  Oe- Phased 


TABLE  26.  SIGNAL  SOURCE  IMPROVEMENT  AREAS. 

1.  Capacitance  Probe  (Fuel) 

Reliability  -  1100  hrs. 

Accuracy  -  .6*  analog,  .25*  digital 

Improvements  -  Plug-In  circuit  boards,  external  test  points.  Improved 

component  reliability 


2.  Thermistors  (Low  Fuel) 

Reliability  -  1100  hrs. 

Improvements  -  Calculation  of  time  remaining  rather  than  quantity 

remaining 


3.  Variable  Reluctance  Sensor  (XMSN  Oil) 

Reliability  -  4000  hrs. 

Accuracy  -  5* 

Improvements  -  Improve  accuracy  to  1  -  2*  with  metallized  diaphragm  with 

semi-conductor  bridge 


4.  Temperature  Sensor  (XMSN  Oil) 


Reliability 

Satisfactory 

Accuracy 

-  +3°C 

Improvements 

-  +1.20C  achievable 

5.  Thermistor  (Engine  Oil  Temp) 

Reliability 

-  2500  hrs. 

Accuracy 

-  +3°C 

Improvements 

-  +1.2°C  achievable 

6.  Transducer  (Engine  Oil  Pressure) 

Reliability  -  4000  hrs. 

Accuracy  -  5* 

Improvements  -  1-2*  achievable  via  metallized  diaphragm  with  semi¬ 

conductor  bridge 
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TABLE  26.  CONTINUED 


7.  Thermocouple  Harness  Probe  (TITl 

Reliability  -  Satisfactory 

Accuracy  -  +5% 

Improvements  -  +3X  possible  with  multiple  element  probes;  grounding  of 

thermocouple  elements  Is  sometimes  a  problem  that  may 

be  solved  with  closed  probes 


8.  Tach  Pulse  Sensor  (Ng»  Nr) 

Reliability  -  5000  hrs. 

Accuracy  -  .5*  of  full  scale 

Improvements  -  .1  -  .2*  achievable;  need  for  Improving  critical  gap  problems 


9.  Shaft  Twist  Sensor  (Torque) 

Reliability  -  Satisfactory 

Accuracy  -  1*  of  full  scale 

Improvements  -  Use  of  shaft  twist  with  measurement  of  phase  of  pulses 


10.  IR  Sensor  (Fire) 

Reliability  -  Satisfactory 

Improvements  -  Improvements  In  circuitry  and  false  warnings  by  ambient 

IR  contamination 


11.  Chip  Detection  (Engine,  XHSN) 

Reliability  -  3000  hrs. 

Improvements  -  Ability  to  distinguish  "fuzz"  from  "chip";  fuzz  burnoff; 

possible  combination  of  magnetic  with  electrical  grid  as 
filtering  system;  measurement  of  debris  for  maintenance 
purposes 


12.  Mechanical  Limit  Switch  (Oil  Filter  Pressure  Differential) 

Reliability  -  Satisfactory 

Improvements  -  Possible  combination  of  reading  with  manifold  pressure 

reading  for  diagnostic  purposes 


/ 
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TABLE  26.  CONTINUED 


13.  DC  Power  Monitor 


Improvements  -  Develop  an  Improved  method  of  monitoring  status  of  DC  bus. 

Present  method  provides  only  go/no-go  information,  and  there 
Is  need  for  a  more  sophisticated  system  capable  of  warning 
of  degraded  operation. 


14.  Fuel  Flow  Measurement 


Reliability  -  Mass  flow  type  sensor  is  fair.  Volumetric  type  is  excellent. 

Accuracy  -  1  -  2%  of  800  lb/hr 

Improvements  -  Mass  flow  contamination  is  a  problem;  volumetric  type  requires 

temperature  compensation,  and  use  of  microprocessor  is 
recomnended. 


15.  Aircraft  Height  Measurement 

Improvements  -  Investigate  locating  weight  sensors  on  landing  gear  and  other 
locations  to  facilitate  aircraft  weight  and  CG  measurement. 


200 


Dimensions 


Auto  Response 


Auto  Feedback 


Auto  Recording 


Code 

1  ' 

Explanation 

it 

Quantitative  dimension  only  dis¬ 
played 

Q 

Qualitative  dimension  only  dis¬ 
played 

B 

Both  qualitative  and  quantita¬ 
tive  dimensions  displayed 

Fuel 

Related  fuel  system  parameters 
also  displayed 

Engine 

Related  engine  system  parameters 
also  displayed 

XMSN 

Related  XMSN  system  parameters 
also  displayed 

Hydraulic 

Related  hydraulic  system  para¬ 
meters  also  displayed 

Electrical 

Related  electrical  system  para¬ 
meters  also  displayed 

APU 

Related  APU  system  parameters 
also  displayed 

D 

Auto  response  is  desirable  and 
should  be  considered 

N 

No  desirability  of  auto  response 
beyond  that  currently  available 

D 

Feedback  indicating  auto  re¬ 
sponse  performed  is  desirable 

N 

Feedback  not  desirable 

D 

Auto  recording  of  parameter 
variables  is  desirable 

N 

Auto  recording  of  parameter 
variables  is  not  desirable 

i* 


legend,  continued. 


Column 

Code 

Explanation 

Urgency 

1 

Safety  Critical 

2 

Mission  Essential 

3 

Maintenance  required/advisory 

Optionally  accessed,  no 
urgency  assigned 

Priority 

1,2,. ..,N 

Ranked  priority  of  message 

* 

Optionally  accessed,  no 
priority  assigned 

Display  Logic 

W 

Warning  Message,  Displayed  by 
Exception 

C 

Caution  Message,  Displayed  by 
Exception 

P 

Precaution  Message,  Displayed 

By  Exception 

M 

Manually  accessed  information 

2 


TABLE  27.  UH-60A  DISPLAY  LOGIC 


Main  Rotor  Overspeed 
thin  Rotor  Overspeed 


TABLE  27.  CONTINUED 
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TABLE  28.  CONTINUED 
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f. 
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TABLE  29.  CONTINUED 


TABLE  30.  OH-58C  DISPLAY  LOGIC 


TABLE  31.  UH-60A  RELATED  SYSTEM  PARAMETERS 


System 

Parameters 

Fuel 

Time  Remaining  (#1,  #2,  Total) 

Lbs  Remaining  (#1,  #2,  Total) 

Pressure  (#1,  #2) 

Engine 

Torque 

NR 

(#1,  #2) 

NP 

(#1,  #2) 

NG 

(#1,  #2) 

TGT 

(#1,  #2) 

Oil  Temp 

(#1,  #2) 

Oil  PSI 

(#1,  #2) 

XMSN 

Pressure 

Temperature 

I 

TABLE  31.  CONTINUED. 


Fuel 

Parameters 

Hydraulics 

Fit  Ctrl  Pressure  (#1,  #2) 

Primary  Servo  Pressure  (#1,  #2) 

T/R  Servo  Pressure  (#1,  #2) 

Electrical 

DC  Gen  Output  (#1,  #2) 

AC  Conv  Output  (#1,  #2) 

AC  Ess  Bus  Status 

DC  Ess  Bus  Status 

Pri  Bus  Status  (#1,  #2) 

Monitor  Bus  Status  (#1,  #2) 

APU 

NP 

EGT 

Oil  PS I 

Accumulator  PSI 

Generator  Output 
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TABLE  32.  CH-47C  RELATED  SYSTEM  PARAMETERS. 


System 

Parameters 

Fuel 

Time  Remaining  (Main,  Fwd  Aux,  Aft  Aux:  #1, 

#2,  Total) 

Lbs  Remaining  (Main,  Fwd  Aux,  Aft  Aux:  #1,  #2, 
Total ) 

Pressure  (Main,  Fwd  Aux,  Aft  Aux:  #1,  #2) 

Engine 

Torque  (#1,  #2) 

NR 

NP  (#1,  #2) 

NG  (#1,  #2) 

Egt  (#1,  #2) 

Oil  Temperature  (#1,  #2) 

Oil  PSI  (#1,  #2) 

Oil  Quantity  (#1,  #2) 

XMSN 

Pressure  (Fwd,  Aft,  Mix,  Left,  Right) 
Temperature  (Fwd,  Aft,  Mix,  Left,  Right) 

Hyraulics 

Fit  Ctrol  PSI  (#1,  #2) 

Util  Hyd  PSI  (#1,  #2) 

Boost  Servo  PSI 

Electrical 

DC  Gen  Output  (#1,  #2) 

AC  Rect  Output  (#1,  #2) 

APU 

NP 

EGT 

Oil  PSI 

Accumulator  PSI 

Gen  Output  Status 

TABLE  33.  AG-1G  RELATED  SYSTEM  PARAMETERS 


System 

Parameters 

Fuel 

Time  Remaining 

Lbs  Remaining 

Pressure 

Engine 

Torque 

NR 

NP 

NG 

EGT 

Oil  PS I 

Oil  Temperature 

XMSN 

Pressure 

Temperature 

Hydraulics 

PSI  (#1,  #2) 

Electrical 

DC  Gen  Output 

AC  Inv  Output 

TABLE  34.  OH-58C  RELATED  SYSTEM  PARAMETERS 


System 

Parameters 

Fuel 

Time  Remaining 

Lbs  Remaining 

Pressure 

Engine 

Torque 

NR 

NP 

NG 

TOT 

Oil  PS I 

Oil  Temperature 

\ 

XMSN 

Pressure 

Temperature 

Hydraulics 

Pressure 

Electrical 

DC  Gen  Output 

AC  Inv  Output 
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TABLE  35.  UH-60A  PRIORITIZATION 


WARNING  PASSAGES 


Priority 

Message 

Trigger 

1 

Low  Rotor  RPM 

HR  <90* 

2 

11  Engine  Out 

NG  <55* 

3 

12  Engine  Out 

NG  <55* 

4 

#1  Engine  Fire 

— 

5 

#2  Engine  Fire 

— 

6 

APU  Fire 

• 

CAUTION  MESSAGES 


Priority 

Message 

Trigger 

7 

Low  Rotor  RPM 

NR  <95* 

8 

Stabllator  Inop 

-- 

9 

11  Overtorque 

TRQ  >114* 

10 

#2  Overtorque 

TRQ  >114* 

11 

Main  Rotor  overspeed 

NR  >125* 

12 

IFF  inoperative 

— 

13 

#1  MP  High/low 

NP  >110*.  <90* 

14 

#2  MP  High/Low 

NP  >110*.  <90* 

15 

#1  Fuel  Pressure  Low 

Press  <8.5  PSI 

16 

#2  Fuel  Pressure  Low 

Press  <8.5  PSI 

17 

fl  NG  High 

NG  >104* 

18 

f2  NG  High 

NG  >104* 

19 

XMSN  on  Press  Low/HIgh 

Press  <25,  >130  PSI 

20 

XMSN  on  Temp  High 

Temp  >140°C 

21 

Chic  Main  XMSN 

-- 

22 

Chip  Interned  late  XMSN 

-- 

23 

Chip  Tall  XMSN 

— 

24 

11  Engine  Chip 

— 

25 

#2  Engine  Chip 

— 
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TABLE  35.  CONTINUED 


Priority 

Message 

Trigger 

26 

11  Eng  Oil  Press  Low/High 

Press  <25.  >100  PSI 

27 

42  Eng  Oil  Press  Low/High 

Press  <25,  >100  PSI 

28 

11  Eng  Oil  Temp  High 

Temp  >150°C 

29 

12  Eng  Oil  Temp  High 

Temp  >150°C 

30 

41  TGT  High 

TGT  >850°C 

31 

42  TGT  High 

TGT  >850°C 

32 

41  PRI  Servo  Press  Low 

Press  <2000  PSI 

33 

42  PRI  Servo  Press  Low 

Press  <2000  PSI 

34 

41  PRI  Servo  Jam 

— 

35 

42  PRI  Servo  Jam 

— 

36 

Tall  Rotor  Servo  Jam 

— 

37 

41  HYD  Pump  Press  Low 

Press  <2000  PSI 

38 

42  HYD  Pump  Press  Low 

Press  <2000  PSI 

39 

41  Fuel  Low 

<  30  Mins 

40 

42  Fuel  Low 

<  30  Mins 

41 

SAS  Off 

42 

Fit  Path  Stab  Sys  Inop 

43 

DC  Ess  Bus  Off 

44 

AC  Ess  Bus  Off 

45 

Pitch  Bias  Failure 

46 

41  Gen  Output  Low 

47 

42  Gen  Output  Low 

48 

41  Conv  Output  Low 

49 

42  Conv  Output  Low 

50 

Boost  Servo  Jam 

51 

41  011  Filter  Bypass 

52 

42  011  Filter  Bypass 

53 

XMSN  Oil  Bypass 

54 

41  Fuel  Filter  Bypass 

55 

42  Fuel  Filter  Bypass 

56 

Battery  Fault 

57 

Battery  Low  Charge 

58 

APU  Fall 

59 

Gust  Lock  Not  Disengaged 

60 

External  Pwr  Connected 
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TABLE  35.  CONTINUED 


lit 


PRECAUTION  MESSAGES 


Priority 

Message 

Trigger 

61 

#1  Overtorque 

TRQ  >104* 

62 

#2  Overtorque 

TRQ  >104* 

63 

Main  Rotor  Overspeed 

NR  >103* 

64 

fl  HP  High/Low 

NP  >103*,  <95* 

65 

42  NP  High/Lott 

NP  >103*.  <95* 

66 

11  NG  High 

NG  >1021 

67 

42  NG  High 

NG  >102* 

68 

XMSN  Oil  Press  Low/High 

Press  <35,  >65  PSI 

69 

XMSN  Oil  Temp  High 

Temp  >120°C 

70 

11  Eng  Oil  Press  LOM/High 

Press  <45.  >80  PSI 

71 

12  Eng  Oil  Press  Low/High 

Press  <45,  >80  PSI 

72 

#1  Eng  Oil  Temp  High 

Terr  >135°C 

73 

42  Eng  Oil  Temp  High 

Temp  >135°C 

74 

41  TGT  High 

TGT  >775°C 

75 

42  TGT  High 

TGT  >775°C 

76 

41  Fuel  Low 

Settable 

77 

42  Fuel  Low 

Settable 

ADVISORY  MESSAGES 


Priority 

Message 

Trigger 

78 

Backup  Pump  On 

— 

79 

Cargo  Hook  Open 

— 

80 

Cargo  Hook  Armed 

— 

81 

Prime  Boost  Pump  On 

— 

82 

APU  On 

- 

83 

APU  Gen  On 

— 

84 

Pitot  Heat  On 

— 

85 

Engine  Start  Valve  Open 

— 

86 

Parking  Brake  On 

— 

87 

41  Eng  Anti-Ice  On 

— 

88 

42  Eng  Anti- Ice  On 

— 

89 

Landing  Light  On 

— 

90 

Fue1  Precaution  Set  At  J 

Settable 
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TABLE  36.  CH-47C  PRIORITIZATION 


WARNING  jCSSAfiES 


Message 


Trlqqer 


Low  Rotor  RPM 
#1  Engine  Out 
#2  Engine  Out 
#1  Engine  Fire 
#2  Engine  Fire 
APU  Fire 


NR  <90% 
NG  <55% 
NG  <55% 


trlty 


CAUTION  MESSAGES 
Message 


Trigger 


Low  Rotor  RPM 

11  Overtorque 

12  Overtorque 

Main  Rotor  Overspeed 
IFF  Inoperative 

11  Main  Fuel  Press  Low 

12  Main  Fuel  Press  Low 

11  Fwd  Aux  Fuel  Press  Low 

12  Fwd  Aux  Fuel  Press  Low 

11  Aft  Aux  Fuel  Press  Low 

12  Aft  Aux  Fuel  Press  Low 
♦1  Xfeed  Fuel  Valve 


NR  <95% 
TRQ  >114% 
TRQ  >114% 
NR  >125% 


Press  <10  PSI 
Press  <10  PSI 
Press  <10  PSI 
Press  <10  PSI 
Press  <10  PSI 
Press  <10  PSI 


12  Xfeed  Fuel  Valve 


♦1  Engine  Fuel  Valve 
12  Engine  Fuel  Valve 


11  NG  High 

12  NG  High 

Fwd  XMSN  Oil  Press  Low/High 
Aft  XMSN  Oil  Press  Low/High 


NG  >104% 

NG  >104% 

Press  <20,  >90  PSI 
Press  <20,  >90  PSI 


TABLE  36.  CONTINUED. 
CAUTION  USSAGES.  cont. 


Priority 

Message 

Trigger 

26 

Mix  XMSN  Oil  Press  Low/High 

Press  <20,  >90  PSI 

27 

Left  XMSN  Oil  Press  Low/High 

Press  <20,  >90  PSI 

26 

Right  XMSN  Oil  Press  Low/High 

Press  <20,  >90  PSI 

29 

Fwd  XMSN  Oil  Tenp  High 

Tenp  >140°C 

30 

Aft  XMSN  Oil  Tenp  High 

Tenp  >140°C 

31 

Mix  XMSN  Oil  Tenp  High 

Tenp  >140°C 

32 

Left  XMSN  Oil  Temp  High 

Tenp  >140°C 

33 

Right  XMSN  Oil  Tenp  High 

Tenp  >140°C 

34 

XMSN  Chip 

— 

35 

41  Engine  Chip 

— 

36 

42  Engine  Chip 

.. 

37 

11  Engine  Oil  Press  Low/High 

Press  <40,  >110  PSI 

38 

42  Engine  Oil  Press  Low/High 

Press  <40,  >110  PSI 

39 

41  Engine  Oil  Tenp  High 

Tenp  >138°C 

40 

42  Engine  Oil  Tenp  High 

Tenp  >138°C 

41 

41  Engine  Oil  Quantity  Low 

Qty  <2  qts 

42 

42  Engine  Oil  Quantity  Low 

Qty  <2  qts 

43 

41  EOT  High 

EGT  »620°C 

44 

42  EGT  High 

EGT  >620°C 

45 

41  HYO  Pwp  Press  Low 

Press  <2500  PSI 

46 

42  HYD  Pump  Press  Low 

Press  <2500  PSI 

47 

41  Main  Fuel  low 

<30  Mins 

48 

42  Main  Fuel  Low 

<30  Mins 

49 

41  Fwd  Aux  Fuel  Low 

<30  Mins 

SO 

42  Fwd  Aux  Fuel  Low 

<30  Mins 

51 

41  Aft  Aux  Fuel  Low 

<30  Mins 

52 

42  Aft  Aux  Fuel  Low 

<30  Mins 

53 

SAS  Off 

— 

54 

41  Gen  Output  Low 

-- 

55 

42  Gen  Output  Low 

-- 

56 

41  Rect  Output  Low 

— 

57 

42  Rect  Output  Low 

— 

58 

Boost  Servo  Press  Low 

— 

59 

Utility  Hyd.  Press  Low 

— 

60 

APU  Fall 
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TABLE  36.  CONTINUED. 

_ CAOTIOW  jtSSAffiSj  cont. 


Priority 

Message 

Trigger 

61 

External  Pwr  Connected 

.. 

62 

Wheel  De-Phased 

— 

63 

Heater  Hot 

— 

PjECAjfflON  ICSSAgS 


Priority 

Message 

Trigger 

64 

#1  Overtorque 

TRQ  >104* 

65 

#2  Overtorque 

TRQ  >104* 

66 

Main  Rotor  Overspeed 

NR  >103* 

67 

#1  NG  High 

NG  >102* 

68 

12  NG  High 

NG  >102* 

69 

Fvd  XMSN  Oil  Press  Low/High 

Press  <30,  >80  PSI 

70 

Aft  XMSN  Oil  Press  Low/High 

Press  <30,  >80  PSI 

71 

Mix  XMSN  Oil  Press  Low/High 

Press  <30.  >80  PSI 

72 

left  XMSN  Oil  Press  Low/High 

Press  <30.  >80  PSI 

73 

Right  XMSN  Oil  Press  Low/High 

Press  <30.  >80  PSI 

74 

Fwd  XMSN  Oil  Teaip  High 

Tenp  >130°C 

75 

Aft  XMSN  Oil  Tenp  High 

Tenp  >130°C 

76 

Mix  XMSN  Oil  Tenp  High 

Tenp  >130°C 

77 

left  XMSN  oil  Tenp  High 

Tenp  >130°C 

78 

Right  XMSN  Oil  Temp  High 

Tenp  >130°C 

79 

#1  Engine  Oil  Press  lov/HIgh 

Press  <50,  >90  PSI 

80 

12  Engine  Oil  Press  Low/High 

Press  <50,  >90  PSI 

81 

11  Engine  Oil  Temp  High 

Tenp  >130°C 

82 

f2  Engine  Oil  Tenp  High 

Tenp  >130°C 

83 

«  EGT  High 

EGT  >570°C 

84 

12  EGT  High 

EGT  >570°C 

85 

11  Main  Fuel  Lon 

Settable 

86 

#2  Main  Fuel  Lon 

Settable 

87 

11  FnG  Aux  Fuel  Lon 

Settable 

88 

#2  FnO  Aux  Fuel  Lon 

Settable 

89 

#1  Aft  Aux  Fuel  Lon 

Settable 

90 

f2  Aft  Aux  Fuel  Lon 

Settable 

n-..  ■—  -  . 

TABLE  37* AH-1G  PRIORITIZATION 


WARNING  MESSAGES 


Priority 

Message 

Trigger 

1 

Low  Rotor  RPN 

NR  <901 

2 

Engine  Out 

N6  <S51 

3 

Engine  Fire 

*• 

CAUTION  MESSAGES 


Priority 

Message 

Trigger 

4 

Low  Rotor  RPN 

NR  <951 

5 

Overtorque 

TRQ  >1141 

6 

Hein  Rotor  Overspeed 

NR  >1251 

7 

IFF  Inoperative 

-- 

8 

NP  High/Low 

NP  >1101,  <901 

9 

Fuel  Pressure  Low 

Press  <5  PSI 

10 

NG  High 

NG  >1041 

11 

XNSN  Oil  Press  Low/High 

Press  <30,  >70  PSI 

12 

XMSN  Oil  Tewp  High 

Toap  >110°C 

13 

Chip  Naln  XMSN 

— 

14 

Chip  Intensedlate  XMSN 

~ 

15 

Chip  Tall  XMSN 

— 

16 

Engine  Chip 

— 

17 

Engine  Oil  Press  Low/High 

Press  <25,  >110  PSI 

18 

Engine  Oil  Tenp  High 

Tewp  >100°C 

19 

EGT  High 

EGT  >625°C 

20 

#1  HYD  Press  Low 

-- 

21 

12  HYD  Press  Low 

— 

22 

Fuel  Low 

<  30  Mins 

23 

DC  Gen  Output  Low 

— 

24 

AC  Inv  Output  Low 

— 

25 

Oil  Filter  Bypass 

*• 

TABLE  37.  CONTINUED 


PRECAUTION  1CSSAGES 


Priority 

Massage 

Trigger 

31 

Overtorque 

TRQ  >104* 

32 

•bin  Rotor  Overspeed 

NR  > 103* 

33 

NP  High/Low 

NM03*.  <95* 

34 

NG  High 

NG  >102* 

35 

XMSN  Oil  Press  Low/HIgh 

Press  <40,  >60  PSI 

36 

XMSN  Oil  Teap  High 

Teajn  105°C 

37 

Engine  Oil  Press  Low/HIgh 

Press  <80,  >100  PSI 

38 

Engine  Oil  Teap  High 

Teap  >  93°c 

39 

EGT  High 

EGT  >610°C 

40 

Fuel  Low 

Settable 
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TABLE  38.  OH-58C  PRIORITIZATION 


MARKINS  IjSSAgS 


Priority 

Message 

Trigger 

1 

Low  Rotor  RPM 

NR  <90X 

2 

Engine  Out 

N6  <55t 

3 

Engine  Fire 

— 

CAUTION  MESSAGES 


Priority 

Message 

Trigger 

4 

Low  Rotor  RPM 

NR  <95X 

S 

Overtorque 

TRQ  >114* 

6 

Rotor  Overspeed 

NR  >1101 

7 

IFF  Inoperative 

— 

8 

NP  Low/Migh 

NP  <95X,  >105X 

9 

Fuel  Pressure  Low 

TOO 

10 

NS  High 

NG  >105X 

11 

XMSN  Oil  Press  Low/High 

Press  <30,  >70  PSI 

12 

XMSN  oil  Temperature  High 

Temp  >110°C 

13 

Chip  Main  XMSN 

— 

14 

Chip  Intermediate  XMSN 

— 

15 

Chip  Tall  XMSN 

-- 

16 

Engine  Chip 

-• 

17 

Engine  Oil  Press  Low/High 

Press  <50.  >130  PSI 

18 

Engine  Oil  Temperature  High 

Temp  >107°C 

19 

TOT  High 

TOT  >810°C 

20 

Hydraulic  Pressure  Low 

-- 

21 

Fuel  Low 

<  30  Mins 

22 

DC  Generator  Output  Low 

— 

23 

AC  Inverter  Output  Low 

— 

24 

Oil  Filter  Bypass 

— 

25 

Fuel  Filter  Bypass 

— 

26 

Fuel  Boost  Pressure  Low 

““ 

TABLE  38.  CONTINUED. 


Priority 

Message 

Trigger 

17 

Overtorque 

TRQ  »104X 

28 

Rotor  Overspeed 

NR  >103* 

29 

NP  Low/High 

NP  <98* ,  >1021 

30 

NG  High 

NG  >1021 

31 

XMSN  Oil  Pressure  Low/High 

Press  <40,  >60  PSI 

32 

XMSN  Temperature  High 

Temp  >105°C 

33 

Engine  Oil  Pressure  Low/High 

Press  <110.  >120  PSI 

34 

Engine  Oil  Temperature  High 

Temp  >100°C 

35 

TOT  High 

TOT  >738°C 

36 

Fuel  Low 

Settable 

TABLE  39.  RELATED  PARAMETER  GROUPS. 

hrinttfs 

Engine  Torque  (Q)  Ho.  1  4  No.  2 
Rotor  Speed  (Hr) 

Power  Turbine  Speed  (Hp)  No.  T  E  No.  2 
tis  lenerator  Speed  (Ns)  No.  1  I  No.  2 
fie*  Turbine  Teupereture  (T6T)  No.  1  I  No.  2 
Engine  Oil  Pressure  (Po)  No.  1  S  No.  2 
Engine  Oil  Temperature  (To)  No.  1  t  No.  2 
Engine  Fire  No.  1  4  No.  2 

Engine  Chip  No.  T  4  No.  2 

Oil  Filter  Bypass  No.  1  4  No.  2 

Fuel  Pressure  No.  1  4  No.  2 

Fuel  Low  No.  1  4  No.  2 

Totel  Fuel 

Fuel  Filter  Bypass  No.  1  4  No.  2 

Transmission  Oil  Pressure 
Transmission  Oil  Teapersture 
Transmission  Oil  Bypass 
Chip,  Main  Transmission 
Chip,  Intermediate  Transmission 
Chip,  Tall  Transmission 

Hydraulic  Pump  Pressure  No.  1  4  No.  2 
Priamry  Servo  Pressure  No.  1  4  No.  2 
Tall  Rotor  Servo  Pressure 
Boost  Servo  Pressure 
Pitch  lias  Failure 


TABLE  39.  CONTINUED 


) 


» 

i 


Group 


S 


6 


7 


8 


Parameters 


Generator  Output 
Convertor  Output 
DC  Essential  Bus 
AC  Essential  Bus 
Battery  Fault 
Battery  Low  Charge 


No.  I  t  No.  2 
No.  I  A  No.  2 
ON/OFF 
ON/OFF 


APtl  Power  Turbine  Speed 
APU  Gas  Temperature 
APU  Oil  Pressure 
Accumulator  Pressure 
APU  Generator  Output 
APU  Fall 
APU  Fire 


Stabl later  Auto  Mode  Inoperative 

Flight  Path  Stabilisation  System  Inoperative 

SAS  Off 

IFF  Inoperative 
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TABLE  40.  PROPERTIES  OF  DATA  TRANSMISSION  CABLES 


Fiber  Optics  Co«x  Twisted  Pair 


XXX 

XXX 

X  X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

200  MHz  20  M4Z  1  IWz 
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Low  Cost 

Temperature  to  300°C 
Vibration  Tolerant 
Low  Cross  Talk 
No  Cross  Talk 
EMI  Noise  lanunlty 
Total  Electrical  Isolation 
No  Spark/Fire  Hazards 
No  Short-Circuit  Loading 
No  Ringing/Echoes 
EMP  lanunlty 
Temperature  to  1000°C 
Height  Savings 
Decreased  Size 
Bandwidth  Capability 
(300  enters) 


TABLE  41.  SSM  WORKLOAD  REDUCTION  FEATURES 
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CWP  DISPLAY 
PRECAUTION  INDICATION 
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POWER  MANAGEMENT  DISPLAY 
PRIORITIZATION 
DISPLAY  FORMATS 
PERIPHERAL  FUNCTIONS 
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XX  XXX  XX 

XX  XXX  XX 

XXX  XX  X 

XX  X  XX 

XXX  X 


XX  XX 
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RESPONSE  SELECTION  ENHANCED 


TABLE  42.  SSM  DELTA  ESTIMATES:  AIRCRAFT  WEIGHT 


AIRCRAFT 


SQA 

NT 

LT 

UH60-A 

+  60 

+  15 

+  15 

CH47-C 

+  30 

-25 

-30 

Wil-G 

+  100 

+  60 

+  60 

CH58-C 

+  105 

♦  60 

♦  60 

SQA:  state-of-the-art  (current)  design;  NT:  near-term  design; 
LT:  long-term  design.  Consult  text  for  qualification  of  these 
estimates  (Task  IV). 
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TABLE  43. 

UH-60A  LIFE  CYCLE 

COST  ESTIMATES. 

VERSION 

FLEET  UCC  DELTA 

PER  AIRCRAFT  IXC  DELTA 

NT  (5  YRS) 

$32,000,000 

$11,000 

LT  (10  YRS) 

$22,000,000 

$25,000 

(1979  CONSTANT  DOLLARS) 

Consult  text  for  qualification  of  these  estimates. 
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APPENDIX  Bs  PILOT  QUESTIONNAIRE 


SUBSYSTEM  STATUS  MONITOR 


NAME: 


ORGANIZATION:  _ 

PHONE:  _ 

TOTAL  HELICOPTER  HOURS: 


Hours  UH-1 
Hours  OH- 58 
Hours  AH-1 
Hours  CH-47 
Hours  UH-60A 


NOE  HOURS: 


NIGHT  HOURS: 


CURRENT  HELICOPTER  ASSIGNMENT: 
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Explanations  and  Directions 


The  purpose  of  this  questionnaire  Is  to  survey  the  opinions  of  experienced 
helicopter  pilots  in  order  to  determine  ways  of  reducing  crew  workload  during 
NOE  Flight.  The  questionnaire  Is  limited  to  methods  of  displaying  and  respond* 
Ing  to  subsystem  status  monitoring  Information.  You  are  asked  to  consider  care¬ 
fully  a  variety  of  Items  of  subsystem  Information,  and  to  decide  whether  the 
information  Is  necessary,  and  when  and  how  It  should  be  displayed  so  that  the 
crew's  workload  My  be  reduced.  Your  careful  decisions  will  Influence  the 
design  of  future  subsystem  monitors  In  helicopters. 

Please  consider  each  Item  of  Information  In  the  light  of  the  following 
decision  areas: 

I.  Priorities 

Explanation 

In  this  section  you  are  asked  to  decide  whether  It  Is  necessary  for  you 

to  be  Informed  of  the  status  of  various  subsystems,  and  to  explain  what 

makes  this  Infonoatlon  necessary. 

D1 rectlons 

Hark  an  X  In  the  column  labeled: 

Safety  -  If  you  decide  that  It  Is  difficult  or  Impossible  to  maintain  the 
safety  of  the  helicopter  and  its  crew  without  this  information 

Mission  -  If  you  decide  that  it  Is  difficult  or  Impossible  to  complete  a 
mission  without  this  Information  (even  though  the  Information  is 
not  necessary  for  maintaining  the  safety  of  the  aircraft  and  crew). 

Maintenance  -  If  you  decide  that  the  Information  Is  necessary  to  assist  you 
Tn  recommending  maintenance  Items  (even  though  the  information  Is 
not  necessary  to  Mlntain  safety  or  to  complete  a  mission) 

Unnecessary  -  If  you  decide  that  the  Information  Is  not  necessary  In 
order  to  Mlntain  safety,  conplete  a  mission,  or  recoemend 
maintenance. 

*  Only  one  (1)  coluw  should  be  Mrked  for  each  Item  of  infonnatlon  con¬ 
sidered  In  this  section. 

**  If  you  Mrk  the  UNNECESSARY  colunn  for  an  Item,  there  Is  no  need  to 
continue  to  the  other  sections  for  that  Item. 
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II.  Mission  Phase 
Explanation 

In  this  section  you  are  asked  to  explain  when  during  a  typical  mission 
It  Is  necessary  for  you  to  be  Informed  of  the  status  of  various  subsystems , 
and  when  during  a  typical  mission  the  Information  Is  unnecessary. 

01  recti ons 

Mark  an  X  In  the  column  labeled: 

TAKEOFF  -  If  you  decide  the  Information  Is  necessary  before,  during,  or 
Imaedlately  after  takeoff. 

CRUISE  -  If  you  decide  the  Information  Is  necessary  during  cruise 

HOVER  -  If  you  decide  the  Information  Is  necessary  during  hover 

LAND  -  if  you  decide  the  Information  Is  necessary  during  landings. 

SHUTDOWN-  If  you  decide  the  Information  Is  necessary  Imnedlately  before, 
during,  or  after  shutdown 

*  More  than  one  column  may  be  marked  for  each  Item  of  Information 
considered  In  this  section. 

III.  Environment 
Explanation 

In  this  section  you  are  asked  to  explain  the  environmental  conditions 
during  which  It  Is  necessary  for  you  to  be  Informed  of  the  status  of  various 
subsystems,  and  the  environmental  conditions  during  which  the  Information 
is  unnecessary. 

Directions 

Mark  an  X.  in  the  colimm  labeled: 

MIGHT  -  if  you  decide  the  information  Is  necessary  during  night  flight 
DAY  -  If  you  decide  the  Information  Is  necessary  during  daytime  flight 

VMC  •  if  you  decide  the  Information  Is  necessary  during  VMC  flight 

IMC  -  If  you  decide  the  Information  Is  necessary  during  the  IMC  flight 

NOE  -  If  you  decide  the  Information  Is  necessary  during  the  NOE  flight 

ALTITUDE-  if  you  decide  the  Information  Is  necessary  during  flight  at  ALTITUDE 

*  More  than  one  colimm  may  be  marked  for  each  Item  of  Information  considered 
In  this  section. 
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IV.  Display 

Explanation 


In  this  section  you  sre  asked  to  decide  whether  It  Is  necessary  to 

display  Items  of  Information  at  all  times,  or  whether  other  means  of 

display  are  more  appropriate. 

Directions 

Nark  an  X  In  the  coljen  labeled: 

CONTI HUAL  -  If  you  decide  that  the  Information  must  be  displayed  at 

all  times 

CRITICAL  ONLY  •  If  you  decide  that  the  Information  must  be  displayed  only  to 
announce  a  critical  condition  affecting  aircraft  safety 
or  mission  conpletlon 

ACCESS  ONLY  -  if  you  decide  that  the  Information  must  be  displayed  only 
through  call-out  by  pilot  or  copilot 

*  Only  one  (1)  colimn  should  be  marked  for  each  Item  of  Information  con¬ 
sidered  In  this  section. 


V.  Format 

Explanation 

In  this  section  you  are  asked  to  decide  upon  the  least  amount  of  content 

required  to  display  the  necessary  Information  for  the  various  subsystems. 

Directions 

Nark  an  X,  In  the  column  labeled: 

QUANTITATIVE  -  If  you  decide  that  numerical  {scale  or  digital)  Information 
must  be  displayed 

QUALITATIVE  -  If  you  decide  that  numerical  information  is  not  necessary,  but 
that  both  "within  limits"  and  “beyond  limits"  Indication 
Is  necessary. 

CONE I NED  -  If  you  decide  that  It  Is  necessary  to  display  both  numerical 

and  within/beyond  limits  Information  simultaneously 

CAUTION  -  If  you  decide  that  Is  Is  necessary  only  to  display  "beyond 
limits"  Information. 


ADVISORT  -  If  you  decide  that  It  Is  necessary  only  to  be  advised  that  the 
system  Is  engaged  or  In  operation. 


Only  one  (1)  column  should  be  marked  for  each  Item  of  Information  In  this 
section. 


VI.  Response 
Explanation 

In  this  section  you  are  asked  to  decide  whether  It  would  be  desirable  to 
Incorporate  an  automated  response  to  the  Information  displayed,  or  whether 
the  crew  must  respond  to  the  condition  displayed. 

01  recti ons 

Mark  an  £  In  the  colon  labeled: 

AUTO  DESIRABLE  -  If  you  decide  that  It  would  be  desirable  to  automate 
the  response  to  the  Inforemtlon  dlspleyed 

AUTO  WOT  DESIRABLE  -  If  you  decide  that  It  would  not  be  desirable  to  auto¬ 
mate  the  response  to  the  Information  displayed,  and  that 
the  crew  must  respond  to  the  condition. 

*  Only  one  (1)  column  should  be  marked  for  each  item  of  Information  considered 
In  this  section. 

**  If  you  mark  AUTO  NOT  DESIRABLE  for  an  Item,  there  Is  no  need  to  proceed 
to  the  next  section  for  that  Item. 

VII.  feedback 
Explanation 

In  this  section  you  are  asked  to  consider  those  items  which  you 
have  marked  AUTO  DESIRABLE,  and  to  decide  whether  It  Is  necessary  to 
Inform  the  crew  that  such  an  automated  response  hes  been  made. 

Directions 

Mark  an  X  In  the  coluan  labeled: 

Display  -  If  you  decide  that  It  Is  necessary  to  Inform  the  crew  that  the 
automated  response  has  been  made 

Display  Unnecessary  -  If  you  decide  that  It  Is  not  necessary  to  Inform 
the  crew  that  the  automated  response  has  been  made 

*  Only  one  (1)  column  should  be  marked  for  each  Item  of  Information  considered 
In  this  section. 

VIII.  Remarks 

In  this  section  you  are  asked  to  Include  any  remarks,  comments,  suggestions, 
or  problems  that  occur  to  you  In  considering  each  subsystem. 

Especially  useful  would  be  remarks  such  as:  ’This  information  Is  unnecessary 
so  long  as  (some  other  Information)  Is  provided.* 
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Additional  Areas 


Please  answer  the  following  questions: 


Can  you  think  of  any  other  items  of  subsystem  information  that  should  be  displayed 
In  future  helicopters? 


Which  caution/waming  lights  have  you  found  Illuminate  most  frequently? 
How  frequently?  During  what  conditions? 


Are  there  any  caution/waming  lights  that  you  have  found  to  be  unreliable? 


What  aspects  of  subsystem  monitoring  have  you  found  to  be  most  problematic, 
annoying,  or  distracting  during  NOE  flight? 


How  do  you  feel  about  presenting  information  through  voice  warning  systems  or 
through  beeps,  tones,  etc.? 


What  problems  do  you  see  arising  with  systems  that  require  you  to  push  buttons 
to  obtain  information  about  subsystems? 


APPENDIX  C;  CONTROL  ALLOCATION  CONCEPTS 


"Control  allocation" 1 8  a  term  referring  to  the  decision-making 
program  by  which  a  computer  monitors  system  operation,  decides  when 
corrective  response  is  required,  and  decides  whether  to  perform  the 
corrective  response  automatically  or  to  inform  the  human  operator 
of  the  condition,  allowing  him  to  perform  the  response. 

The  emphasis  in  control  allocation  is  upon  software  progranming 
combining  an  open  loop  option  (assigning  control  to  the  pilot)  with 
closed  loop  features  (automatic  response  by  the  machine)  into  a  single 
monitoring  controller,  as  opposed  to  systems  which  isolate  machine  from 
human  control ,  or  assign  control  allocation  decisions  to  the  human 
operator. 

The  application  of  on-board  computer  systems  including  remote 
sensing  terminals  and  central  processing  units  allows  for  both  pre¬ 
programming  of  allocation  of  control  and  alteration  of  such  programs. 

This  software  capability  has  raised  intriguing  and  currently  largely 
theoretical  possibilities  for  adaptive  computer-aided  control.  In 
adaptive  computer-aided  control,  programming  of  control  allocation  is 
flexible  and  may  be  adapted  for  and  by  individual  crew  members,  either 
by  accepting  of  control  allocation  logic  programmed  by  any  given  pilot 
(which  may  differ  from  another  pilot's  program),  or  by  monitoring  a 
pilot's  responses  over  time  and  developing  a  model  of  control  allocation 
that  will  duplicate  the  pilot's  preferences  for  specified  decisions. 

An  example  of  pilot  preprogramming  included  in  the  SSH  is  the  selec¬ 
tion  of  the  level  at  which  a  FUEL  LOW  precaution  will  be  displayed.  Each 
pilot  may  select  or  program  a  different  level.  The  example  is  quite 
elementary,  but  the  inclusion  of  an  automated  response  as  a  program 
element  would  constitute  an  exmnple  of  more  extensive  adaptive  computer- 
aided  control. 

A  program  that  would  average  pilot  preferences  for  fuel  precaution 
level  over  time  rather  than  rely  upon  the  last  set  level,  as  in  the 
proposed  SSM  design,  and  respond  to  the  average  in  the  absence  of  any 
resetting  after  engine  shutdown/ startup  would  represent  an  example  of 
the  modelling  feature  of  adaptive  computer-aided  control. 

Looking  toward  a  future  in  which  each  crew  member  programs  the 
aircraft  to  his  specific  requirements,  advocates  of  adaptive  computer- 
aided  control  point  to  the  following  potential  benefits: 

1.  Unburdening:  relieves  the  operator  of  continuous  monitoring  and 
decision-making,  freeing  him  for  other  command  and  control  functions. 

2.  Consistency:  replacing  continual  operator  control  by  a  decision 
model  may  significantly  increase  decision-making  consistency,  and  can 
help  insure  that  decisions  are  made  optimally  with  respect  to  normative 
criteria. 

3.  Performance:  may  improve  on  secondary  tasks  because  of  unburdening. 

The  potential  for  flexible,  adaptive  computer-aided  control  leads 

to  a  variety  of  unanswered  questions: 

1.  Will  the  concept  ever  achieve  acceptance?  Laboratory  studies 
have  shown  that  operators  are  quite  willing  to  receive  assistance  from 
an  aiding  device  which  Incorporates  their  own  preferences,  especially 
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once  the  guiding  principles  have  been  explained. 

2.  What  forms  and  extent  of  information  feedback  are  appropriate 
for  operator  cognizance  of  system  operation7 

3.  What  levels  of  systems  are  appropriate  for  programming?  Should 
monitoring,  display,  or  response  be  programmable,  or  all  three? 

4.  How  should  programmable  systems  be  protected  from  programming 
error? 

5.  How  should  programmable  systems  protect  one  human  user  from 
another? 

While  some  form  of  control  allocation  will  be  an  aspect  of  most 
computerized  monitoring  and  control  systems  that  involve  human  operators, 
the  provisions  for  adaptive  computer-aided  control  will  require  detailed 
study  in  the  future. The  utility  of  the  concept  of  computer-aided  adaptive 
control  has  not  been  extensively  applied  and  proven  in  aircraft  conmand 
and  control.  Both  the  concept  and  its  applications  require  further  study. 
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